CVE-2026-110926

Name of the Vulnerable Software and Affected Versions OpenSSH (affected versions not specified)

Description A flaw exists where channels on the same connection share a single LZ77 dictionary when compression is negotiated. LZ77 is a lossless data compression algorithm that replaces repeated occurrences of data with references to a previous occurrence. An attacker who can write to one channel may recover plaintext from another channel by utilizing chosen-plaintext lengths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.