[ CVE-2026-106588 · Published 6 Oct 2026 ]

Vulnerability in OpenBSD OpenSSH

CVSS 3.1 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund6 Oct 2026WID-SEC-2026-3785

OpenSSH: Multiple vulnerabilities Translated from German
Risk mediumCVE-2026-106583CVE-2026-106555CVE-2026-106584+8 more CVEs

[ References ]References

www.openssh.org/releasenotes.html

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

OpenSSH: Multiple vulnerabilities Translated from German

[ References ]References