CVE Field Guide
About Us
CVE-2026-60001
PUBLISHED
Assigner:
mitre
Reserved:
08.07.2026
Published:
08.07.2026
Updated:
08.07.2026
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS Score:
6.5
CVSS score
6.5
Attack Vector
Network
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
None
Privileges Required
None
Integrity Impact
Low
User Interaction
None
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
OpenBSD
Product
OpenSSH
Versions
Default:
unaffected
affected from 0 to 10.4 (excl.)
References
https://www.openwall.com/lists/oss-security/2026/07/06/5
https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
https://www.openssh.org/releasenotes.html#10.4p1
Problem Types
CWE-770 Allocation of Resources Without Limits or Throttling
CWE