dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. CREATE(Triage):(User=admin) CVE-2025-47203 (https://nvd.nist.gov/vuln/detail/CVE-2025-47203)