Is CVE-2026-106555 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106555?

CVE-2026-106555 has a CVSS v3 severity of LOW (2.2).

Back

Description

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.