CVE-2026-60001

MediumCVSS 6.5

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

A vulnerability in OpenSSH before version 10.4 causes the sshd server to not always enforce the minimum authentication delay. This could allow an attacker to perform login attempts more quickly.

Risk Assessment

The risk is an increased speed of brute-force password attacks, potentially leading to unauthorized system access.

Recommendation

It is recommended to immediately update OpenSSH to version 10.4 or later, which fixes this vulnerability.

Original NVD description (English source)

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.