CVE-2026-106553
published 2026-10-06CVE-2026-106553: In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
PriorityP348high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.14%
2.8th percentile
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openbsd | openssh | < 10.6 | 10.6 |
| openbsd | openssh | — | — |
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| ubuntu | openssh | — | — |
| ubuntu | openssh-gssapi | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
vendor_redhat7.5HIGH
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
ghsa_unreviewed·2026-10-06
CVE-2026-106553 [LOW] CWE-669 In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
Ubuntu
OpenSSH vulnerabilities
vendor_ubuntu·2026-10-19·CVSS 6.5
CVE-2026-106553 [MEDIUM] OpenSSH vulnerabilities
Title: OpenSSH vulnerabilities
Summary: Several security issues were fixed in OpenSSH.
It was discovered that OpenSSH's sftp client incorrectly handled paths
returned by the server during a recursive copy operation. A remote attacker
controlling the server could possibly use this issue to write files to
unintended locations. (CVE-2026-106552)
It was discovered that OpenSSH's sshd server incorrectly handled
GSSAPIAuthentication state across authentication attempts. An attacker
could possibly use this issue to obtain credentials from a previous failed
authentication attempt. (CVE-2026-106553, CVE-2026-106555)
It was discovered that OpenSSH incorrectly used an LZ77 dictionary coder
during compression. An attacker could possibly use this issue to obtain
sensitive information. (CVE-2026-106
Ubuntu
OpenSSH vulnerabilities
vendor_ubuntu·2026-10-14·CVSS 6.5
CVE-2026-106552 [MEDIUM] OpenSSH vulnerabilities
Title: OpenSSH vulnerabilities
Summary: Several security issues were fixed in OpenSSH.
It was discovered that OpenSSH's sftp client incorrectly handled paths
returned by the server during a recursive copy operation. A remote
attacker controlling the server could possibly use this issue to write
files to unintended locations. (CVE-2026-106552)
It was discovered that OpenSSH's sshd server incorrectly handled
GSSAPIAuthentication state across authentication attempts. An attacker
could possibly use this issue to obtain credentials from a previous
failed authentication attempt. (CVE-2026-106553, CVE-2026-106555)
It was discovered that OpenSSH incorrectly used an LZ77 dictionary coder
during compression. An attacker could possibly use this issue to obtain
sensitive information. (CVE-2026-106
Red Hat
openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication
vendor_redhat·2026-10-06·CVSS 7.5
CVE-2026-106553 [HIGH] CWE-459 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication
openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
A flaw was found in OpenSSH. When Generic Security Services Application Programming Interface (GSSAPI) authentication is enabled, the SSH daemon fails to properly discard credentials after a failed authentication attempt. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session. This issue allows an authenticated user to access lingering credentials, leading to information disclosure.
Statement: A flaw was found in OpenSSH where the sshd daemon fails to properly discard GSSAPI credentials aft
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-106553 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication [fedora-all]
bugzilla·2026-10-19·CVSS 7.5
CVE-2026-106553 [HIGH] CVE-2026-106553 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication [fedora-all]
CVE-2026-106553 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
Discussion:
*** Bug 2553373 has been marked as a duplicate of this bug. ***
Bugzilla
CVE-2026-106553 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication
bugzilla·2026-10-06·CVSS 7.5
CVE-2026-106553 [HIGH] CVE-2026-106553 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication
CVE-2026-106553 openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
2026-10-06
Published