OpenSSH scp command injection (CVE-2020-15778)

Sep 02, 2026

Vulnerability ID	Vulnerability Overview
CVE-2020-15778	The `scp` command in OpenSSH fails to neutralize special shell characters like backticks in destination arguments. A local attacker can embed commands in filenames to execute arbitrary code on remote servers during a copy operation.

Affected Supported TeraStations

None

Date	Description
09/02/2026	Initial release