OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-106587

LOW · CVSS 3.6 EPSS 0.08%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

OpenSSH versions prior to 10.6 have a vulnerability where the configuration option set to "none" may be misinterpreted as a filename, potentially leading to unintended behavior in the SSH daemon. While the severity is rated low, this misconfiguration could expose systems to unexpected security risks or operational issues. Administrators using affected versions should prioritize reviewing their SSH configurations to ensure proper settings and mitigate any potential impact.

CVE
CVE-2026-106587
Severity
LOW
CVSS
3.6
EPSS
0.08%

Original NVD Description

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Related CVEs

Other vulnerabilities affecting the same vendor(s)