CVE-2026-106584EPSS p0.0%

CVE-2026-106584CVE-2026-106584

Description

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.

Scoring

CVSS 2.5 ()
VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS0.06% probability of exploitation · percentile 0.0% · 2026-10-07T12:00:27Z
Last modified2026-10-07
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.