CVEvulnerability
CVE-2026-106582
3.7 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2026-10-06
- Last modified
- 2026-10-13
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-514
Description
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.
Affected configurations
• openbsd openssh (< 10.6)
Related
Weakness · CWE (1)
- CWE-514 Covert Channel weakness
References
- https://arxiv.org/abs/2609.07709 Third Party Advisory
- https://www.openssh.org/releasenotes.html#10.6 Release Notes