What’s Vulnerable › Vulnerabilities

CVE-2026-106588

• Severity: low (CVSS 3.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-06 · updated 2026-10-07
• Weakness: CWE-653

Description

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.

Affected products

• OpenSSH: through 10.6

References

• https://www.openssh.org/releasenotes.html#10.6

Get alerted when CVE-2026-106588 or the next vulnerability affects your stack