Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-08T00:14:31 openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-307

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.

A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion.

Red Hat Hardened Images 2026-07-09T00:00:00Z RHSA-2026:37382 openssh-main-10.4p1-1.hum1 Red Hat Enterprise Linux 10 Fix deferred openssh Red Hat Enterprise Linux 6 Fix deferred openssh Red Hat Enterprise Linux 7 Fix deferred openssh Red Hat Enterprise Linux 8 Fix deferred openssh Red Hat Enterprise Linux 9 Fix deferred openssh Red Hat OpenShift Container Platform 4 Fix deferred rhcos https://www.cve.org/CVERecord?id=CVE-2026-60000 https://nvd.nist.gov/vuln/detail/CVE-2026-60000 https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2 https://www.openssh.org/releasenotes.html#10.4p1 https://www.openwall.com/lists/oss-security/2026/07/06/5