Skip to content
Threat Feed
Subscribe

Product

Libssh < 0.11.5

1 brief RSS
high threat

CVE-2026-59851: Libssh GSSAPIKeyExchange Authorization Bypass

A vulnerability in libssh, tracked as CVE-2026-59851, allows an authenticated Kerberos principal to bypass authorization checks on servers with GSSAPIKeyExchange enabled, enabling arbitrary local user login and potential privilege escalation.

exploited libssh +2 vulnerability authorization-bypass privilege-escalation
1t 5c 22i