CVE-2026-106582

LOWCVSS 3.7

Description

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Timeline

Published:October 6th, 2026 9:17 PM

Last modified:October 7th, 2026 3:17 PM

CVSS Scoring

CVSS v3: 3.7 (LOW)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-514

References & Reports

Advisories, patches, and third-party reports

https://arxiv.org/abs/2609.07709
https://www.openssh.org/releasenotes.html#10.6

Source: NIST NVD · Data may lag official sources by up to one minute