CVE-2026-105429

Published 14 October 2026 · tracked since 15 October 2026

Description

Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide Ope

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-108291 CRITICAL 9.8
• CVE-2026-106599 HIGH 8.8
• CVE-2026-103905 HIGH 7.5
• CVE-2026-104795 HIGH 8.8
• CVE-2026-86476 HIGH 8.4
• CVE-2026-110284 HIGH 7.5
• CVE-2026-104909 HIGH 8.1
• CVE-2026-100163 HIGH 7.4
• CVE-2026-103366 HIGH 7.5
• CVE-2026-103367 HIGH 8.1

→ Open the live CVE board · all tools