PT-2026-107285 · Openbsd · Openssh

CVE-2026-106587

·

Published

2026-10-06

·

Updated

2026-10-06

CVSS v3.1

3.6

Low

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Fix

Type Confusion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-106587

Affected Products

Openssh