Skip to content
OpenAdvisories

Vendor

sshnet

3 known vulnerabilities.

Products

SSH.NET 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-85756

    SSH.NET: ScpClient allows server-side RCE via default SCP path handling

    SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every re…

    sshnet SSH.NET SSH.NET NuGet
  • High 7.1
    CVE-2026-48798

    SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames

    SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names returned by a remote SCP server and combines them with the requested local directo…

    sshnet SSH.NET SSH.NET NuGet