CVE-2026-60000
published 2026-07-08CVE-2026-60000: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.62%
48.9th percentile
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openbsd | openssh | < 10.4 | 10.4 |
| openbsd | openssh | — | — |
| ubuntu | openssh | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_ubuntu8.1HIGH
vendor_redhat3.7LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat
ghsa_unreviewed·2026-07-08
CVE-2026-60000 [LOW] CWE-770 sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
VulDB
OpenBSD OpenSSH up to 10.3 GSSAPIAuthentication resource consumption
vuldb·2026-07-08·CVSS 3.7
CVE-2026-60000 [LOW] OpenBSD OpenSSH up to 10.3 GSSAPIAuthentication resource consumption
A vulnerability classified as problematic was found in OpenBSD OpenSSH up to 10.3. This issue affects some unknown processing of the component GSSAPIAuthentication. Such manipulation leads to resource consumption.
This vulnerability is traded as CVE-2026-60000. The attack may be launched remotely. There is no exploit available.
Ubuntu
OpenSSH vulnerabilities
vendor_ubuntu·2026-09-22·CVSS 8.1
CVE-2026-73282 [HIGH] OpenSSH vulnerabilities
Title: OpenSSH vulnerabilities
Summary: Several security issues were fixed in OpenSSH.
Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell
metacharacters in certain usernames. An attacker could possibly use this
issue to execute arbitrary commands when certain non-default
configurations were used, resulting in arbitrary code execution. This
issue only affected Ubuntu 14.04 LTS. (CVE-2026-35386)
Christos Papakonstantinou discovered that OpenSSH incorrectly handled
ECDSA algorithm restrictions. An attacker could possibly use this issue
to cause unintended ECDSA algorithms to be accepted, resulting in
security restrictions being bypassed. (CVE-2026-35387)
Vladimir Tokarev discovered that OpenSSH incorrectly handled certain
principal restrictions in authorized_keys files.
Ubuntu
OpenSSH vulnerabilities
vendor_ubuntu·2026-07-13·CVSS 5.4
CVE-2026-60001 [MEDIUM] OpenSSH vulnerabilities
Title: OpenSSH vulnerabilities
Summary: Several security issues were fixed in OpenSSH.
It was discovered that OpenSSH sftp did not properly constrain the location
of downloaded files when connecting to an attacker-controlled server. An
attacker could possibly use this issue to write files to unintended
locations on the file system. (CVE-2026-59995)
It was discovered that OpenSSH scp could place files in the parent
directory of the intended destination when copying between two remote
hosts. An attacker could possibly use this issue to write files to
unintended locations. (CVE-2026-59996)
It was discovered that OpenSSH internal-sftp only recognized the first nine
command-line arguments, This could result in certain security-sensitive
arguments being ignored, contrary to expectations. (CV
Red Hat
openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
vendor_redhat·2026-07-08·CVSS 3.7
CVE-2026-60000 [LOW] CWE-307 openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion.
Package: openssh (Red Hat Enterprise Linux 10) - Fix deferred
Package: openssh (Red Hat Enterprise Linux 6) - Fix deferred
Package: openssh (Red Hat Enterprise Linux 7) - Fix deferred
Package: openssh (Red Hat Enterprise Linux 8) - Fix deferred
Package: openssh (Red Hat Enterprise Linux 9) - Fix deferred
Package: openssh (Red Hat Hardened Images) - Affected
Package: rhcos
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-110924 openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication [fedora-all]
bugzilla·2026-10-15·CVSS 4.8
CVE-2026-110924 [MEDIUM] CVE-2026-110924 openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication [fedora-all]
CVE-2026-110924 openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A flaw was found in OpenSSH sshd when GSSAPIAuthentication is enabled. A partial GSSAPI exchange left gssapi_client, including an exported name and credential, for a later authentication attempt on the same connection. ssh_gssapi_storecreds stored delegated credentials even when ssh_gssapi_userok had not succeeded. The RHEL maintainer confirmed that this does not authorize a later login. The impact is storage of a delegated credential that userok did
Bugzilla
CVE-2026-110924 openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication
bugzilla·2026-10-15·CVSS 4.8
CVE-2026-110924 [MEDIUM] CVE-2026-110924 openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication
CVE-2026-110924 openssh: openssh: GSSAPI delegated credentials can be stored after a failed authentication
A flaw was found in OpenSSH sshd when GSSAPIAuthentication is enabled. A partial GSSAPI exchange left gssapi_client, including an exported name and credential, for a later authentication attempt on the same connection. ssh_gssapi_storecreds stored delegated credentials even when ssh_gssapi_userok had not succeeded. The RHEL maintainer confirmed that this does not authorize a later login. The impact is storage of a delegated credential that userok did not accept. RHEL ships GSSAPIAuthentication yes. On RHEL 10, GSSAPIDelegateCredentials defaults to yes, and storecreds returns early only when that switch is off. This is not CVE-2026-60000 (MaxAuthTries and GSSAPI) and not CVE-2026-3497
Bugzilla
CVE-2026-60000 openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
bugzilla·2026-07-08·CVSS 3.7
CVE-2026-60000 [LOW] CVE-2026-60000 openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
CVE-2026-60000 openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
2026-07-08
Published