CVE-2026-59998

Опубликовано: 08 июл. 2026

Источник: nvd

CVSS3: 4.8

CVSS3: 6.5

EPSS Низкий

Описание

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Ссылки

https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
Release Notes
https://www.openssh.org/releasenotes.html#10.4p1
Release Notes
https://www.openwall.com/lists/oss-security/2026/07/06/5
Mailing List
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Версия до 10.4 (исключая)

EPSS

Процентиль: 8%

0.0018

Низкий

4.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-573

Связанные уязвимости

CVE-2026-59998

CVSS3: 4.8

ubuntu

25 дней назад

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

CVE-2026-59998

CVSS3: 4.8

redhat

25 дней назад

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

CVE-2026-59998

msrc

22 дня назад

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

CVE-2026-59998

CVSS3: 4.8

debian

25 дней назад

sshd in OpenSSH before 10.4 has an undocumented security-relevant beha ...

GHSA-3j2g-cqmq-cjw9

CVSS3: 4.8

github

25 дней назад

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

EPSS

Процентиль: 8%

0.0018

Низкий

4.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-573