CyberRota Analysis
AI-GeneratedOpenSSH versions prior to 10.6 are vulnerable due to a lack of validation for maximum packet length during the decompression of highly compressed data, potentially leading to denial-of-service conditions. Organizations using affected versions should prioritize patching to mitigate the risk of service disruptions. This vulnerability is particularly relevant for environments heavily reliant on SSH for secure communications.
CVE
CVE-2026-106585
Severity
MEDIUM
CVSS
6.5
EPSS
0.19%
Original NVD Description
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)