CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 8
- DescriptionNVD modified 2026-10-21 06:47
Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553. - CwesCWE-459 → NVD modified 2026-10-21 07:17
- References-2 references (now 0)NVD modified 2026-10-21 07:17
- StatusAwaiting Analysis → RejectedNVD modified 2026-10-21 07:17
- DescriptionNVD modified 2026-10-21 07:17
A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state.Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553. - CVSS4.8 (v3.1, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) → NVD modified 2026-10-21 07:17
- StatusReceived → Awaiting AnalysisNVD modified 2026-10-15 17:17
- First seenCVSS 4.8NVD modified 2026-10-15 14:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.