CyberRota Analysis
AI-GeneratedOpenSSH versions prior to 10.6 have a vulnerability in the sshd component where the GSSAPIAuthentication state may be improperly retained between authentication attempts, potentially allowing unauthorized access under certain conditions. While the severity is rated low, organizations using affected versions should prioritize updating to mitigate any risk of credential misuse. This is particularly relevant for environments relying on GSSAPI for secure authentication.
CVE
CVE-2026-106555
Severity
LOW
CVSS
2.2
EPSS
0.08%
Original NVD Description
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.