Microsoft Security Response Center Follow CVE-2026-60000 sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60000 msrc.microsoft.com