Skip to content
Threat Feed
Subscribe

Product

Sshd in OpenSSH < 10.4

1 brief RSS
medium advisory

OpenSSH sshd GSSAPI Behavior Vulnerability CVE-2026-59998

CVE-2026-59998 describes an undocumented security-relevant behavior in sshd, a component of OpenSSH, specifically in versions prior to 10.4, where the GSSAPIStrictAcceptorCheck setting reportedly has no value when the server is operating within a Windows Active Directory environment.

sshd in OpenSSH < 10.4 +1 vulnerability openssh gssapi active-directory windows misconfiguration
1c