CVE-2026-110925command-injection

CVE-2026-110925

published October 15, 2026

CVSS
5.4
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583.

The record
Technical detail
CVSS
5.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.6th percentile
Published
2026-10-15T10:17Z
EPSS history
Timeline
  • 16 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 15 OCT 05:25Z
    Openssh: openssh: '$' and '\' in a command-line username expand through %u
    cvelistv5
  • 15 OCT 05:25Z
    Openssh: openssh: '$' and '\' in a command-line username expand through %u
    cvelistv5