CVE-2016-7406

CRITICAL · CVSS 9.8 EPSS 10.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-03-03 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-7406

Severity

CRITICAL

CVSS

9.8

EPSS

10.49%

Original Filing — NVD Description

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument.