CVE-2026-59998
Received Received - Intake

sshd GSSAPIStrictAcceptorCheck Missing in Windows AD

Publication date: 2026-07-08

Last updated on: 2026-07-08

Assigner: MITRE

Description
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-08
Last Modified
2026-07-08
Generated
2026-07-08
AI Q&A
2026-07-08
EPSS Evaluated
N/A
NVD
CVE-2026-59998
EUVD
EUVD-2026-42141

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openssh openssh to 10.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-573 The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Impact Analysis

This vulnerability can impact you by potentially weakening the security checks related to GSSAPI authentication when the OpenSSH server is integrated with Windows Active Directory. This could lead to a lower level of assurance in the authentication process, possibly allowing unauthorized access or impersonation under certain conditions.

Executive Summary

The vulnerability exists in sshd in OpenSSH versions before 10.4. It involves an undocumented security-relevant behavior where the configuration option GSSAPIStrictAcceptorCheck has no effect if the server is part of a Windows Active Directory environment.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59998. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart