CVE-2026-60000
ADVISORY - debianSummary
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
- openssh 1:10.4p1-1 [trixie] - openssh (Minor issue) [bookworm] - openssh (Minor issue) [bullseye] - openssh (Minor issue) https://www.openssh.org/releasenotes.html#10.4p1
EPSS Score: 0.00441 (0.367)
Common Weakness Enumeration (CWE)
ADVISORY - redhat
Improper Restriction of Excessive Authentication Attempts
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2026-60000
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/openssh | apk | alpine | 3.23 | <=10.2_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=10.0_p1-r10 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=10.0_p1-r7 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=10.0_p1-r8 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=10.0_p1-r9 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=7.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=7.5_p1-r8 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=7.7_p1-r4 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=7.9_p1-r3 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=8.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=8.5_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=8.8_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=9.6_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=9.8_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.22 | <=9.9_p2-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=7.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=7.5_p1-r8 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=7.7_p1-r4 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=7.9_p1-r3 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=8.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=8.5_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=8.8_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=9.6_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=9.6_p1-r1 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=9.6_p1-r2 | Not yet available |
| alpine/openssh | apk | alpine | 3.19 | <=9.7_p2-r5 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=7.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=7.5_p1-r8 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=7.7_p1-r4 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=7.9_p1-r3 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=8.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=8.5_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=8.8_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=9.6_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=9.8_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=9.9_p1-r2 | Not yet available |
| alpine/openssh | apk | alpine | 3.21 | <=9.9_p2-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=7.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=7.5_p1-r8 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=7.7_p1-r4 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=7.9_p1-r3 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=8.4_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=8.5_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=8.8_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=9.6_p1-r0 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=9.7_p1-r4 | Not yet available |
| alpine/openssh | apk | alpine | 3.20 | <=9.7_p1-r5 | Not yet available |
Severity and metrics
No CVSS data available from this advisory.
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-60000
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-60000
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.5mediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-60000
EXPLOITABILITY SCORE
2.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.9mediumPhoton
CREATED
UPDATED
ADVISORY ID
CVE-2026-60000
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-