yocto ▾
›
scarthgap ▾
›
vulnerability
›
CVE-2026-60000
Component Overview
Vulnerability Overview
Name
CVE-2026-60000
Source
NVD (
link
)
Debian (
link
)
Description
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
CWEs
CWE-770
Published Date
Jul 8, 2026
Updated Date
Jul 9, 2026
Workaround
-
Advisories
https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
Release Notes
https://www.openssh.org/releasenotes.html#10.4p1
Release Notes
https://www.openwall.com/lists/oss-security/2026/07/06/5
Mailing List
Analysis
#
Affected Component
Analysis
openssh
Patched
Vulnerability Ratings
#
3.7
CVSSv31
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
openssh
buildroot
2025.02.x
9.9p2
Patched
openssh
buildroot
master
10.5p1
Not Affected
openssh
openwrt
master
10.4_p1-r2
Not Affected
openssh
openwrt
openwrt-25.12
10.3_p1-r1
Exploitable
openssh
yocto
kirkstone
8.9p1
Exploitable
openssh
yocto
master
10.5p1
Not Affected
Resolved with patches
#
openssh (buildroot:2025.02.x)
#
Title
Author
Resolve
1
upstream: Fix multiple RFC 4462 (GSSAPIAuthentication)
"djm@openbsd.org" <djm@openbsd.org>
CVE-2026-60000
openssh (yocto:scarthgap)
#
Title
Author
Resolve
1
upstream: Fix multiple RFC 4462 (GSSAPIAuthentication)
"djm@openbsd.org" <djm@openbsd.org>
CVE-2026-60000