Skip to content

PatchFirst · Latest vulnerabilities

openssh 10.6: known vulnerabilities

Known vulnerabilities affecting openssh 10.6: 2. Compare the fixes below with your installed release.

Vulnerabilities: 2

CVE-2026-106589
Low · CVSS 2.9EPSS 0.08%No fix published
CVE-2026-106589
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.
openssh Network services
Published October 6, 2026Updated October 7, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2026-106588
Low · CVSS 3.1EPSS 0.13%No fix published
CVE-2026-106588
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.
openssh Network services
Published October 6, 2026Updated October 7, 2026
Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →