Is CVE-2026-110926 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110926?

CVE-2026-110926 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-110926

Description

A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths.