Is CVE-2026-106553 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106553?

CVE-2026-106553 has a CVSS v3 severity of LOW (2.2).

Back

Description

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.