p PatchFirst

CVE-2026-106588

CVE-2026-106588

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.

CVSS 3.1 · Low · EPSS 0.1%

Published
Updated

Stack: system · network

Affected products and versions

  • openssh

    Versions
    • ≥ 0, ≤ 10.6: Affected (custom)

    No fix published

  • openssh-ssh1 Ubuntu:18.04:LTS

    Versions
    • 1:7.5p1-8
    • 1:7.5p1-9
    • 1:7.5p1-9build1
    • 1:7.5p1-10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openssh-ssh1 Ubuntu:20.04:LTS

    Versions
    • 1:7.5p1-11build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openssh-ssh1 Ubuntu:22.04:LTS

    Versions
    • 1:7.5p1-12
    • 1:7.5p1-12build1
    • 1:7.5p1-13
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openssh-ssh1 Ubuntu:24.04:LTS

    Versions
    • 1:7.5p1-14
    • 1:7.5p1-15
    • 1:7.5p1-15build1
    • 1:7.5p1-16
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openssh-ssh1 Ubuntu:26.10

    Versions
    • 1:7.5p1-18
    • 1:7.5p1-18ubuntu1
    • 1:7.5p1-18ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • openssh-ssh1 Ubuntu:26.04:LTS

    Versions
    • 1:7.5p1-17
    • 1:7.5p1-18
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →