CVE-2026-60001

OpenSSH versions prior to 10.4 have a vulnerability in the sshd component that fails to consistently enforce the minimum authentication delay, potentially allowing attackers to execute rapid brute-force login attempts. This could lead to unauthorized access to systems relying on affected versions of OpenSSH. Organizations using these versions should prioritize patching to mitigate the risk of credential compromise.