CVE-2026-60000

A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion.

This Moderate impact denial of service flaw in OpenSSH's sshd daemon arises from improper handling of MaxAuthTries during GSSAPI authentication attempts. Exploitation requires GSSAPIAuthentication to be explicitly enabled, which is not the default configuration in Red Hat Enterprise Linux and other affected Red Hat products, thereby limiting the attack surface in typical deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.