CVE-2026-106583

Published Oct 7, 2026

Last updated 9 hours ago

CVSS low 2.5

Overview

Description: In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
Source: cve@mitre.org
NVD status: Analyzed
Products: openssh

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

cve@mitre.org: CWE-99

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "09209468-5A53-45C0-8698-8C668E53EBEA",
            "versionEndExcluding": "10.6",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.•CVE-2026-106587
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.•CVE-2026-106586
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.•CVE-2026-106585
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.•CVE-2026-106584
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.•CVE-2026-106582

References

Sources include official advisories and independent security research.

https://nvd.nist.gov/vuln/detail/CVE-2026-106583
https://www.openssh.org/releasenotes.html#10.6

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References