CVE-2026-110926: Observable Discrepancy in Red Hat Red Hat Hardened Images

This vulnerability in OpenSSH occurs when compression is negotiated and multiple channels share a single LZ77 dictionary. An attacker with write access to one channel can leverage this shared dictionary to recover plaintext data from a different channel by manipulating plaintext lengths. The issue affects Red Hat Enterprise Linux 10, but no specific affected versions are provided. The CVSS v3.1 score is 5.3, indicating medium severity. No known exploits are reported in the wild, and no patch or remediation details are currently provided by the vendor advisory.

The vulnerability allows an attacker with limited privileges (low privilege level) and network access to potentially recover sensitive plaintext data from other channels within the same OpenSSH connection. This compromises confidentiality but does not affect integrity or availability. The attack complexity is high, and no user interaction is required.

Patch status is not yet confirmed — check the Red Hat vendor advisory at https://access.redhat.com/security/cve/CVE-2026-110926 for current remediation guidance. Until a fix is available, consider disabling compression in OpenSSH configurations to mitigate the risk.