CVE-2026-106583

OpenSSH versions prior to 10.6 are vulnerable to command-line injection due to the improper handling of special characters, specifically the $ and \ characters, in usernames. This flaw could allow an attacker to manipulate command execution, potentially leading to unauthorized access or other malicious actions. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation.