OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-106584

LOW · CVSS 2.5 EPSS 0.06%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

OpenSSH versions prior to 10.6 are vulnerable due to improper handling of Daylight Saving Time in ssh-keygen, which may lead to incorrect expiration times for generated certificates. While the overall severity is low, users in specific Antarctic regions could experience more pronounced issues. Organizations utilizing affected OpenSSH versions should prioritize updating to mitigate potential certificate validation problems.

CVE
CVE-2026-106584
Severity
LOW
CVSS
2.5
EPSS
0.06%

Original NVD Description

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.