CVE-2026-110924
A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can...
CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
What each source reports
GitHub Advisories Score usedGHSA-q953-q6mf-pwpq
A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can...
A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state.
- Record
GHSA-q953-q6mf-pwpq- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-459
- Updated
- 2026-11-02
CVE List No score
CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
- Record
CVE-2026-110924- Updated
- 2026-11-02
EUVDEUVD-2026-102054
CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
- Record
EUVD-2026-102054- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
NVD No score
Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
- Record
CVE-2026-110924- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-110924
Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
- Record
UBUNTU-CVE-2026-110924- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openssh-ssh1Ubuntu:18.04:LTS |
All versions, plus listed versions 1:7.5p1-81:7.5p1-91:7.5p1-9build11:7.5p1-10 |
None known |
openssh-ssh1Ubuntu:20.04:LTS |
All versions, plus listed versions 1:7.5p1-11build1 |
None known |
openssh-ssh1Ubuntu:22.04:LTS |
All versions, plus listed versions 1:7.5p1-121:7.5p1-12build11:7.5p1-13 |
None known |
openssh-ssh1Ubuntu:24.04:LTS |
All versions, plus listed versions 1:7.5p1-141:7.5p1-151:7.5p1-15build11:7.5p1-16 |
None known |
openssh-ssh1Ubuntu:26.10 |
All versions, plus listed versions 1:7.5p1-181:7.5p1-18ubuntu11:7.5p1-18ubuntu2 |
None known |
openssh-ssh1Ubuntu:26.04:LTS |
All versions, plus listed versions 1:7.5p1-171:7.5p1-18 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-110924 has been rejected by its source and should not be treated as a live vulnerability, published October 15, 2026.