CVE-2026-85756
1 advisory.
NuGet/SSH.NET CVE-2026-85756: high 7.5
SSH.NET: ScpClient allows server-side RCE via default SCP path handling
Action: Upgrade SSH.NET to 2026.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.0.0 | - |
Fixed versions
| 2026.0.0 |
Sources
- osv: GHSA-mggc-4xg6-vcxf
- https://github.com/sshnet/SSH.NET/security/advisories/GHSA-mggc-4xg6-vcxf
- https://nvd.nist.gov/vuln/detail/CVE-2026-85756
- https://github.com/sshnet/SSH.NET/commit/c66b9f8fb06c12e71761e58a577b1e796026310f
- https://github.com/sshnet/SSH.NET
- https://github.com/sshnet/SSH.NET/releases/tag/2026.0.0
CVE-2026-85756 · published · modified · JSON