PT-2026-56291 · Openssh · Openssh

Published 2026-07-08 · Updated 2026-07-08 · CVE-2026-60000

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.4

Description The sshd component allows remote attackers to cause a denial of service through resource consumption. This occurs due to the mishandling of the MaxAuthTries variable during GSSAPIAuthentication, which enables an excessive number of authentication attempts.

Recommendations Update to version 10.4 or later.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-60000

Affected Products

Openssh

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-60000 · Security Note
• https://twitter.com/infoflowcloud/status/2074730503588937993 · Twitter Post
• https://openwall.com/lists/oss-security/2026/07/06/5 · Note
• https://twitter.com/CVEnew/status/2074728403173872010 · Twitter Post
• https://openssh.org/releasenotes.html#10.4p1 · Note
• https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2 · Note