OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-106582

LOW · CVSS 3.7 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

OpenSSH versions prior to 10.6 are vulnerable due to the use of an LZ77 dictionary coder in the sshd and ssh components, which contradicts established security findings. While the severity is rated low, this vulnerability could potentially lead to data leakage or exploitation in specific scenarios. Organizations utilizing affected versions of OpenSSH should prioritize updating to mitigate any associated risks.

CVE
CVE-2026-106582
Severity
LOW
CVSS
3.7
EPSS
0.18%

Original NVD Description

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.