OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-106588

LOW · CVSS 3.1 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

OpenSSH versions up to 10.6 are vulnerable due to the use of the macOS 27 SDK, which inadvertently disables sandboxing features. This loss of sandboxing could lead to unexpected security implications, potentially exposing systems to unauthorized access or exploitation. Organizations utilizing affected versions of OpenSSH on macOS should prioritize addressing this issue to maintain their security posture.

CVE
CVE-2026-106588
Severity
LOW
CVSS
3.1
EPSS
0.13%

Original NVD Description

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.