PT-2026-56291 · Openssh+3 · Openssh+3

CVE-2026-60000

·

Published

2026-07-08

·

Updated

2026-08-25

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.4
Description The sshd component allows remote attackers to cause a denial of service through resource consumption. This occurs due to the mishandling of the MaxAuthTries variable during GSSAPIAuthentication, which enables an excessive number of authentication attempts.
Recommendations Update to version 10.4 or later.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-92048
CVE-2026-60000
ECHO-61A7-566A-CB19
JLSEC-2026-1324
OESA-2026-3428
OESA-2026-3429
OESA-2026-3430
OESA-2026-3431
OESA-2026-3432
OPENSUSE-SU-2026:21477-1
SUSE-SU-2026:22978-1
SUSE-SU-2026:3605-1
USN-8533-1

Affected Products

Ibm Aix
Linuxmint
Openssh
Ubuntu