Covert Channel

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()CVE-2026-42768OpenSSL · CVSS 3.7 · 0.8% likely

   OpenSSL

2. In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.CVE-2026-106582OpenBSD · CVSS 3.7 · 0.2% likely

   Openbsd

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.