All vulnerabilities

Servers and applications

CVE-2026-106582

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Severity
Low 3.7
Published
6 Oct 2026
Last changed
13 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
10.6
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSHServers and applications · cpe:a:openbsd:openssh
  • Every version before 10.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-106582
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-106582