What is CVE-2026-106555?

CVE-2026-106555 is a security advisory published by Microsoft Security Response Center (MSRC) with Low severity. In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

Which CVE IDs does CVE-2026-106555 cover?

CVE-2026-106555 covers the following CVE IDs: CVE-2026-106555. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-106555?

CVE-2026-106555 has a CVSS v3 base score of 2.2, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-106555?

CVE-2026-106555 affects 1 product, including: azl3 openssh 9.8p1-10 on Azure Linux 3.0.

CVE-2026-106555LowCVSS 2.2

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

Vendor

Microsoft Security Response Center (MSRC)

Published

October 8, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-106555 →

🎯 Affected products1

azl3 openssh 9.8p1-10 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106555
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade