CVE-2026-106582

OpenBSD / OpenSSH PUBLISHED

Description (CNA)

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Affected (CNA)

Vendor / product	Versions
OpenBSD / OpenSSH	affected 0 before 10.6

CWE

CWE-514

References

https://www.openssh.org/releasenotes.html#10.6
https://arxiv.org/abs/2609.07709

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.