{"id":"CVE-2026-110924","published":"2026-10-15T14:17:22.387","lastModified":"2026-10-15T17:17:16.257","description":"A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state.","cvssScore":4.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwes":["CWE-459"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-110924","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553033","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}