OpenSSH GSSAPI acceptor check behavior in Active Directory (CVE-2026-59998)

Summary

An Active Directory environment may render a GSSAPI security setting ineffective.

Vulnerability ID	Vulnerability Overview
CVE-2026-59998	When an SSH server operates in Windows Active Directory, GSSAPIStrictAcceptorCheck can have no effect. This undocumented behavior can invalidate the administrator's expectations about the configured acceptor check.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices