Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-83923
CVSS base score
8.8 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-23
Last modified
October 29, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
microsoft windows 10 1809
microsoft windows 10 21h2
microsoft windows 10 22h2
microsoft windows 11 23h2
microsoft windows 11 24h2
microsoft windows 11 25h2
microsoft windows 11 26h1
microsoft windows 11 26h2
microsoft windows server 2019
microsoft windows server 2022
References
- msrc.microsoft.com Vendor Advisory