| Bug | Description |
|---|
| CVE-2026-106589 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 ... |
| CVE-2026-106588 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK ha ... |
| CVE-2026-106587 | In sshd in OpenSSH before 10.6, the value "none" for a configuration o ... |
| CVE-2026-106586 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_ke ... |
| CVE-2026-106585 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether ... |
| CVE-2026-106584 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrec ... |
| CVE-2026-106583 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a comma ... |
| CVE-2026-106582 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can b ... |
| CVE-2026-106555 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication st ... |
| CVE-2026-106553 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist af ... |
| CVE-2026-106552 | In sftp in OpenSSH before 10.6, a server can trigger directory travers ... |
| CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_ke ... |
| CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can o ... |
| CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotel ... |