2.9
Faible
CVE-2026-106589 In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can…
Description
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenSSH 10.6 | premières → 10.6 | Pas de correctif indiqué |
Références
- www.openssh.org www.openssh.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de OpenSSH
Les 33 CVE de OpenSSH →
CVE-2026-123158
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password…
8.1
Élevée
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection
2.5
Faible
CVE-2026-106588
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which…
3.1
Faible
CVE-2026-106587
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but…
3.6
Faible