CVE-2026-109152Published
jbardin scp.py SCP Receive _recv_pushd path traversal
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-109152 · Microsoft / collected KEV context
cve-program · CVE-2026-109152
- https://vuldb.com/vuln/416886
- https://vuldb.com/vuln/416886/cti
- https://vuldb.com/cve/CVE-2026-109152
- https://vuldb.com/submit/978646
- https://github.com/jbardin/scp.py/issues/206
- https://github.com/jbardin/scp.py/commit/42fc3aaa71411daed60544e3b40179c1038bed5d
- https://github.com/jbardin/scp.py/releases/tag/v0.16.2
- https://github.com/jbardin/scp.py/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.