Logo
vulnerabilityCVE-2026-60000
Name
CVE-2026-60000
Source
NVD ( link)Debian ( link)
Description
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
openssh
Exploitable

Vulnerability Ratings#


3.7
CVSSv31
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.9p2
Patched
buildroot
master
10.5p1
Not Affected
openwrt
master
10.4_p1-r2
Not Affected
openwrt
openwrt-25.12
10.3_p1-r1
Exploitable
yocto
master
10.5p1
Not Affected
yocto
scarthgap
9.6p1
Patched

Resolved with patches#


openssh (buildroot:2025.02.x)

#
Title
Author
Resolve
1
upstream: Fix multiple RFC 4462 (GSSAPIAuthentication)
"djm@openbsd.org" <djm@openbsd.org>
CVE-2026-60000

openssh (yocto:scarthgap)

#
Title
Author
Resolve
1
upstream: Fix multiple RFC 4462 (GSSAPIAuthentication)
"djm@openbsd.org" <djm@openbsd.org>
CVE-2026-60000