Is CVE-2026-106588 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106588?

CVE-2026-106588 has a CVSS v3 severity of LOW (3.1).

Back

Description

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.