CVE-2026-60000

Name
CVE-2026-60000
Description
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
cve@mitre.org https://www.openssh.org/releasenotes.html#10.4p1
cve@mitre.org https://www.openwall.com/lists/oss-security/2026/07/06/5

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* openssh >= None < 10.4

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openssh edge-main 10.3_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.2_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.1_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r11 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r10 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r9 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r8 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r7 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r6 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r5 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r4 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r3 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.9_p2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.9_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.8_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.6_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 8.9_p2-r0 None possibly vulnerable
openssh edge-main 8.8_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 8.5_p1-r0 None possibly vulnerable
openssh edge-main 8.4_p1-r0 None possibly vulnerable
openssh edge-main 7.9_p1-r3 None possibly vulnerable
openssh edge-main 7.7_p1-r4 None possibly vulnerable
openssh edge-main 7.5_p1-r8 None possibly vulnerable
openssh edge-main 7.4_p1-r0 None possibly vulnerable
openssh 3.24-main 10.3_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.23-main 10.2_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r10 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r9 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r8 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r7 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 9.9_p2-r0 None possibly vulnerable
openssh 3.22-main 9.8_p1-r0 None possibly vulnerable
openssh 3.22-main 9.6_p1-r0 None possibly vulnerable
openssh 3.22-main 8.8_p1-r0 None possibly vulnerable
openssh 3.22-main 8.5_p1-r0 None possibly vulnerable
openssh 3.22-main 8.4_p1-r0 None possibly vulnerable
openssh 3.22-main 7.9_p1-r3 None possibly vulnerable
openssh 3.22-main 7.7_p1-r4 None possibly vulnerable
openssh 3.22-main 7.5_p1-r8 None possibly vulnerable
openssh 3.22-main 7.4_p1-r0 None possibly vulnerable
openssh 3.21-main 9.9_p2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.21-main 9.9_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.21-main 9.8_p1-r0 None possibly vulnerable
openssh 3.21-main 9.6_p1-r0 None possibly vulnerable
openssh 3.21-main 8.8_p1-r0 None possibly vulnerable
openssh 3.21-main 8.5_p1-r0 None possibly vulnerable
openssh 3.21-main 8.4_p1-r0 None possibly vulnerable
openssh 3.21-main 7.9_p1-r3 None possibly vulnerable
openssh 3.21-main 7.7_p1-r4 None possibly vulnerable
openssh 3.21-main 7.5_p1-r8 None possibly vulnerable
openssh 3.21-main 7.4_p1-r0 None possibly vulnerable
openssh 3.20-main 9.7_p1-r5 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.20-main 9.7_p1-r4 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.20-main 9.6_p1-r0 None possibly vulnerable
openssh 3.20-main 8.8_p1-r0 None possibly vulnerable
openssh 3.20-main 8.5_p1-r0 None possibly vulnerable
openssh 3.20-main 8.4_p1-r0 None possibly vulnerable
openssh 3.20-main 7.9_p1-r3 None possibly vulnerable
openssh 3.20-main 7.7_p1-r4 None possibly vulnerable
openssh 3.20-main 7.5_p1-r8 None possibly vulnerable
openssh 3.20-main 7.4_p1-r0 None possibly vulnerable
openssh 3.19-main 9.7_p2-r5 None possibly vulnerable
openssh 3.19-main 9.6_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 9.6_p1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 9.6_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 8.8_p1-r0 None possibly vulnerable
openssh 3.19-main 8.5_p1-r0 None possibly vulnerable
openssh 3.19-main 8.4_p1-r0 None possibly vulnerable
openssh 3.19-main 7.9_p1-r3 None possibly vulnerable
openssh 3.19-main 7.7_p1-r4 None possibly vulnerable
openssh 3.19-main 7.5_p1-r8 None possibly vulnerable
openssh 3.19-main 7.4_p1-r0 None possibly vulnerable