CVE-2020-15778EPSS p96.5%

CVE-2020-15778CVE-2020-15778

openbsd / openssh

Description

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

Scoring

CVSS 7.4 ()
VectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS13.68% probability of exploitation · percentile 96.5% · 2026-10-17T12:00:28Z
Last modified2026-10-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.