CVE-2026-59996 scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

USN-8514-1: OpenSSH vulnerability

Cisco IOS XE Software Secure Copy Protocol Server Denial of Service Vulnerability