Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-106588

No fix known EPSS <1%CVSS 3.1

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.

Published 2026-10-06 · CVE record · OSV

Products: openbsd openssh

Distro releases

ReleasePackageFixed in
Ubuntu 18.04 LTSopenssh-ssh1no fix
Ubuntu 20.04 LTSopenssh-ssh1no fix
Ubuntu 22.04 LTSopenssh-ssh1no fix
Ubuntu 24.04 LTSopenssh-ssh1no fix
Ubuntu 26.04 LTSopenssh-ssh1no fix
Ubuntu 26.10openssh-ssh1no fix