CVE-2026-106585

OpenBSD / OpenSSH PUBLISHED

Description (CNA)

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.

Affected (CNA)

Vendor / product	Versions
OpenBSD / OpenSSH	affected 0 before 10.6

CWE

CWE-409

References

https://www.openssh.org/releasenotes.html#10.6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.