CVE-2026-106584

OpenBSD / OpenSSH PUBLISHED

Description (CNA)

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.

Affected (CNA)

Vendor / product	Versions
OpenBSD / OpenSSH	affected 0 before 10.6

CWE

CWE-193

References

https://www.openssh.org/releasenotes.html#10.6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.