Cloudanix VulnDB

CVE-2026-106582

Low · 3.7

CVSS

3.7

EPSS

0.2%

Published

Oct 6, 2026

CISA due date

—

The record

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities