IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
3.1Düşük

CVE-2026-106588

OpenBSD OpenSSH Yayım: (1 ay önce)

Açıklama

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.

Zayıflık türü (CWE): CWE-653

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
OpenBSD OpenSSH ≤ 10.6

Kaynaklar ve yamalar

Aynı üründe son açıklar — OpenSSH

2.5Düşük
CVE-2026-106583
OpenBSD OpenSSH

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

2.9Düşük
CVE-2026-106589
OpenBSD OpenSSH

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-…

3.6Düşük
CVE-2026-106587
OpenBSD OpenSSH

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

2.5Düşük
CVE-2026-106586
OpenBSD OpenSSH

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

6.5Orta
CVE-2026-106585
OpenBSD OpenSSH

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.