Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-08 | 2 | Disclosure2 |
| 2026-07-10 | 1 | Disclosure1 |
CVE-2026-60000: OpenSSH <10.4 allows unlimited auth attempts when GSSAPI is enabled. MaxAuthTries was ignored. Resource exhaustion, no credentials required. NIST: 7.5 HIGH.
Post summary
The post reports that OpenSSH versions below 10.4 allow unlimited authentication attempts when GSSAPI is enabled, ignoring MaxAuthTries and causing resource exhaustion without requiring credentials.
🚨*CVE* CVE-2026-60000 sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries wa… https://www.cve.org/CVERecord?id=CVE-2026-60000 ----- Traducción: CVE-2026-60000 ssh… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑60000, highlighting a DoS flaw in OpenSSH that arises from MaxAuthTries handling, and directs readers to the official CVE record.
CVE-2026-60000 sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries wa… https://www.cve.org/CVERecord?id=CVE-2026-60000
Post summary
The text announces CVE-2026-60000, a DoS issue in OpenSSH before 10.4 caused by MaxAuthTries handling, but does not mention a PoC, exploit, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openbsd | openssh | - | - | - |