A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state.
2026年10月16日
CVE-2026-110924 [MEDIUM] – A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt c
📑 文章目录



