OpenSSH scp remote-to-remote destination mishandling (CVE-2026-59996)

Summary

Remote-to-remote copying may place a file in the parent directory.

Vulnerability ID	Vulnerability Overview
CVE-2026-59996	When copying between two remote destinations, scp may resolve the target incorrectly and place a file in the parent of the intended directory.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices