CVE-2026-59998 - OpenSSH GSSAPI Authentication Security Bypass

CVE Advisories
Post Reply
Starburst-David
Posts: 286
Joined: Wed Feb 11, 2026 8:31 pm

CVE-2026-59998 - OpenSSH GSSAPI Authentication Security Bypass

Post by Starburst-David »

CVE ID: CVE-2026-59998
Published: July 8, 2026
Description: sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
Severity: 4.8 | MEDIUM

More Information:
https://cvefeed.io/vuln/detail/CVE-2026-59998
 

POSTREACT(ions) SUMMARY

Post Reply

Return to “CVE Advisories”