CVE-2026-106586: openbsd openssh
CVSS: 4.3v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-106586DEBIAN-CVE-2026-106586RHSA-2026:82247
Published 06-10-2026Last modified 07-10-2026
Vulnerability summary
CVE-2026-106586 is a medium (CVSS 4.3) vulnerability in openbsd openssh. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.9% of scored vulnerabilities.
CVSS score
4.3/10
010
Medium · v3.1 (NVD)EPSS score
0.12%
0%100%
Low · Change unavailableKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 10 · Downstream 3 · Related 2Timeline
- 06-10-2026PublishedVulnerability first disclosed.
- 07-10-2026Last modifiedVulnerability information updated.
Description
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.
CVSS metrics
5 scores · 5 sources · 1 versionMedium 4.3Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NSources5 sources · 2.5–6.5
- CVE.orgCNA2.5LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- OSV · DebianEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- OSV · Red hatEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NDiffers
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
07-10-202620-10-2026
EPSS score0.12%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- openssh< 0:10.5p1-1.2.hum1
- openssh-askpass< 0:10.5p1-1.2.hum1
- openssh-clients< 0:10.5p1-1.2.hum1
- openssh-keycat< 0:10.5p1-1.2.hum1
- openssh-keysign< 0:10.5p1-1.2.hum1
Ubuntu3 products
- opensshAll versions (No fix recorded) | < 1:8.9p1-3ubuntu0.18 | < 1:9.6p1-3ubuntu13.20 | < 1:10.5p1-1ubuntu3.1 | < 1:10.2p1-2ubuntu3.8
- openssh-gssapiAll versions (No fix recorded) | < 1:10.5p1-1ubuntu3.1
- openssh-ssh1All versions (No fix recorded)
Debian2 products
- opensshAll versions (No fix recorded) | < 1:10.6p1-1
- openssh-gssapiAll versions (No fix recorded) | < 1:10.6p1-1
Openbsd1 product
- openssh< 10.6
4 vendors · 13 products
References
54 links
- images.redhat.comARTICLE
Show all 54 references
- arxiv.org/abs/2609.07709ARTICLE