OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-106555

LOW · CVSS 2.2 EPSS 0.08%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

OpenSSH versions prior to 10.6 have a vulnerability in the sshd component where the GSSAPIAuthentication state may be improperly retained between authentication attempts, potentially allowing unauthorized access under certain conditions. While the severity is rated low, organizations using affected versions should prioritize updating to mitigate any risk of credential misuse. This is particularly relevant for environments relying on GSSAPI for secure authentication.

CVE
CVE-2026-106555
Severity
LOW
CVSS
2.2
EPSS
0.08%

Original NVD Description

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.