Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

OpenSSH Before 10.4: Authentication Delay Not Always Respected

published 2 months ago
Summary

OpenSSH's SSH server (sshd) may not wait long enough between authentication attempts, allowing attackers to try multiple passwords quickly. This could make it easier for hackers to guess passwords. To fix this, update to OpenSSH 10.4 or later.

What to do
  • Update juliabinarywrappers openssh_jll to version 10.4.1+0.
Affected software
Ecosystem VendorProductAffected versions
Julia juliabinarywrappers openssh_jll < 10.4.1+0
Fix: upgrade to 10.4.1+0
Original advisory text
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Timeline
Published14 Aug 2026
Updated14 Aug 2026
First seen14 Aug 2026
Sources
JLSEC-2026-1325 · OSV
Track software like this
Free during beta