Vulnerability-Lookup

RHSA-2026:84849

Vulnerability from csaf_redhat - Published: 2026-10-19 12:05 - Updated: 2026-10-20 04:11

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Severity

Low

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: openssh: * openssh-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-askpass-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-clients-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-keycat-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-keysign-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-server-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-sk-dummy-10.5p1-1.3.hum1 (aarch64, s390x, x86_64) * openssh-10.5p1-1.3.hum1.src (src) Security Fix(es): openssh: * CVE-2026-106555 * CVE-2026-106553

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-106553

A flaw was found in OpenSSH. When Generic Security Services Application Programming Interface (GSSAPI) authentication is enabled, the SSH daemon fails to properly discard credentials after a failed authentication attempt. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session. This issue allows an authenticated user to access lingering credentials, leading to information disclosure.

2.2 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

CWE-459 - Incomplete Cleanup

Affected products

Fixed 22 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-106555

A flaw was found in OpenSSH's SSH daemon (sshd). When Generic Security Service Application Program Interface (GSSAPI) authentication is enabled, authentication state can improperly persist across separate authentication attempts. A local user could exploit this condition during sequential authentication sessions to access residual credentials from prior attempts, resulting in an information disclosure.

2.2 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

CWE-488 - Exposure of Data Element to Wrong Session

Affected products

Fixed 22 products, the same list as for CVE-2026-106553

Threats

Impact Low

References

15 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:84849	self
https://access.redhat.com/security/cve/CVE-2026-106553	external
https://access.redhat.com/security/cve/CVE-2026-106555	external
https://access.redhat.com/security/updates/classi…	external
https://images.redhat.com/	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-106553	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547191	external
https://www.cve.org/CVERecord?id=CVE-2026-106553	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106553	external
https://www.openssh.org/releasenotes.html#10.6	external
https://access.redhat.com/security/cve/CVE-2026-106555	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547190	external
https://www.cve.org/CVERecord?id=CVE-2026-106555	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106555	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nopenssh:\n  * openssh-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-askpass-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-clients-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-keycat-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-keysign-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-server-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-sk-dummy-10.5p1-1.3.hum1 (aarch64, s390x, x86_64)\n  * openssh-10.5p1-1.3.hum1.src (src)\n\nSecurity Fix(es):\n\nopenssh:\n  * CVE-2026-106555\n  * CVE-2026-106553",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:84849",
        "url": "https://access.redhat.com/errata/RHSA-2026:84849"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-106553",
        "url": "https://access.redhat.com/security/cve/CVE-2026-106553"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-106555",
        "url": "https://access.redhat.com/security/cve/CVE-2026-106555"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84849.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-10-20T04:11:08+00:00",
      "generator": {
        "date": "2026-10-20T04:11:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:84849",
      "initial_release_date": "2026-10-19T12:05:16+00:00",
      "revision_history": [
        {
          "date": "2026-10-19T12:05:16+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-19T12:08:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-20T04:11:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-clients-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-clients-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-server-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-server-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
                "product": {
                  "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
                  "product_id": "openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy@10.5p1-1.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-askpass-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-askpass-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-clients-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-clients-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-keycat-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-keycat-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-keysign-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-keysign-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-server-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-server-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
                "product": {
                  "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
                  "product_id": "openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy@10.5p1-1.3.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:10.5p1-1.3.hum1@src",
                "product": {
                  "name": "openssh-0:10.5p1-1.3.hum1@src",
                  "product_id": "openssh-0:10.5p1-1.3.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@10.5p1-1.3.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-clients-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-clients-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-server-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-server-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64",
                "product": {
                  "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64",
                  "product_id": "openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy@10.5p1-1.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:10.5p1-1.3.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src"
        },
        "product_reference": "openssh-0:10.5p1-1.3.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-askpass-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-clients-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-clients-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-clients-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-keycat-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-keysign-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-server-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-server-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-server-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64"
        },
        "product_reference": "openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x"
        },
        "product_reference": "openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
        },
        "product_reference": "openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-106553",
      "cwe": {
        "id": "CWE-459",
        "name": "Incomplete Cleanup"
      },
      "discovery_date": "2026-10-06T20:42:19.853034+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547191"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When Generic Security Services Application Programming Interface (GSSAPI) authentication is enabled, the SSH daemon fails to properly discard credentials after a failed authentication attempt. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session. This issue allows an authenticated user to access lingering credentials, leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in OpenSSH where the sshd daemon fails to properly discard GSSAPI credentials after a failed authentication attempt when GSSAPIAuthentication is enabled. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session, allowing an authenticated local user to access lingering GSSAPI credentials and causing information disclosure. This affects the openssh package in Red Hat Hardened Images, where a fix is being pursued. Exploitation requires GSSAPI authentication to be enabled (it is disabled by default), a failed GSSAPI authentication attempt, and a subsequent successful authentication through another method; the impact is limited to confidentiality of the residual credentials, with no integrity or availability impact. Red Hat therefore rates this flaw LOW severity (CVSS 3.1 score 2.2), which differs significantly from the NIST score of 7.5: the NIST vector assumes a network-accessible, unauthenticated attack with high integrity impact, which is not supported by the technical evidence for this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106553"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547191",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547191"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106553",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106553"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106553",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106553"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.6",
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "release_date": "2026-10-06T20:25:45.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:05:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84849"
        },
        {
          "category": "workaround",
          "details": "Set GSSAPIAuthentication to no in the sshd configuration (e.g. /etc/ssh/sshd_config) and reload or restart the sshd service. This flaw only occurs when GSSAPI authentication is enabled, which is not the default configuration, so deployments that do not rely on GSSAPI authentication can disable it to prevent credentials from persisting after a failed authentication attempt. The upstream fix is included in OpenSSH 10.6; for the affected Red Hat Hardened Images package, apply the update once it becomes available through the product\u0027s update stream.",
          "product_ids": [
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication"
    },
    {
      "cve": "CVE-2026-106555",
      "cwe": {
        "id": "CWE-488",
        "name": "Exposure of Data Element to Wrong Session"
      },
      "discovery_date": "2026-10-06T20:42:12.996297+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547190"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH\u0027s SSH daemon (sshd). When Generic Security Service Application Program Interface (GSSAPI) authentication is enabled, authentication state can improperly persist across separate authentication attempts. A local user could exploit this condition during sequential authentication sessions to access residual credentials from prior attempts, resulting in an information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: OpenSSH: Information disclosure via GSSAPI authentication state persistence",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low impact because exploitation is constrained to systems where GSSAPI authentication is explicitly enabled and yields only limited residual credential data rather than unauthorized access or privilege escalation. The condition requires a specific sequence of an initial failed GSSAPI negotiation followed by a successful secondary authentication method within the same connection. In standard deployments where GSSAPI is disabled or not used in conjunction with fallback authentication methods, the vulnerability cannot be triggered.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
          "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
          "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
          "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
          "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106555"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547190",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547190"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106555",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106555"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106555",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106555"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.6",
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "release_date": "2026-10-06T20:28:56.022000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-19T12:05:16+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:84849"
        },
        {
          "category": "workaround",
          "details": "Disable GSSAPI authentication in the SSH daemon configuration if Kerberos-based authentication is not required.",
          "product_ids": [
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@src",
            "Red Hat Hardened Images:openssh-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-askpass-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-clients-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keycat-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-keysign-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-server-0:10.5p1-1.3.hum1@x86_64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@aarch64",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@s390x",
            "Red Hat Hardened Images:openssh-sk-dummy-0:10.5p1-1.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssh: OpenSSH: Information disclosure via GSSAPI authentication state persistence"
    }
  ]
}

CVE-2026-106553 (GCVE-0-2026-106553)

Vulnerability from cvelistv5 – Published: 2026-10-06 20:25 – Updated: 2026-10-07 16:23

Summary

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.

Severity

2.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-07 16:22 UTC

CWE

CWE-669 - Incorrect Resource Transfer Between Spheres

Assigner

mitre mitre root Scorecard

References

1 reference

URL	Tags
https://www.openssh.org/releasenotes.html#10.6

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.6 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106553",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-07T16:22:41.442164Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-07T16:23:00.151Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-669",
              "description": "CWE-669 Incorrect Resource Transfer Between Spheres",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T20:25:45.854Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-106553",
    "datePublished": "2026-10-06T20:25:45.854Z",
    "dateReserved": "2026-10-06T20:25:45.450Z",
    "dateUpdated": "2026-10-07T16:23:00.151Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-106555 (GCVE-0-2026-106555)

Vulnerability from cvelistv5 – Published: 2026-10-06 20:28 – Updated: 2026-10-09 01:48

Summary

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

Severity

2.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-09 01:48 UTC

CWE

CWE-669 - Incorrect Resource Transfer Between Spheres

Assigner

mitre mitre root Scorecard

References

1 reference

URL	Tags
https://www.openssh.org/releasenotes.html#10.6

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.6 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106555",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-09T01:48:46.566284Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-09T01:48:54.705Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-669",
              "description": "CWE-669 Incorrect Resource Transfer Between Spheres",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T20:28:56.022Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-106555",
    "datePublished": "2026-10-06T20:28:56.022Z",
    "dateReserved": "2026-10-06T20:28:55.653Z",
    "dateUpdated": "2026-10-09T01:48:54.705Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:84849

CVE-2026-106553 (GCVE-0-2026-106553)

CVE-2026-106555 (GCVE-0-2026-106555)

Tags

Sightings

Nomenclature

Related by attack behaviour