OpenSSH minimum authentication delay bypass (CVE-2026-60001)

Summary

The SSH daemon may fail to enforce its minimum authentication delay.

Vulnerability ID	Vulnerability Overview
CVE-2026-60001	The configured minimum delay for authentication processing is not consistently honored. This weakens the intended timing protection for authentication attempts.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices