MEDIUMCVSS v3.1 4.3Vulnerability

CVE-2026-110927

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.0026
Cvss score
4.3
Cvss severity
MEDIUM
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
4.3
Cvss version
3.1
Cve id
CVE-2026-110927
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published at
2026-10-15T14:17:22.760
Last modified
2026-10-19T22:17:03.733
Epss percentile
0.16613

Related Entities (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-110927 (CVSS v3.1 4.3) — Ninja Signal Threat Intelligence | Ninja Signal