Skip to content
Threat Feed
Subscribe

Product

Libssh

2 briefs RSS
high threat

CVE-2026-59851: Libssh GSSAPIKeyExchange Authorization Bypass

A vulnerability in libssh, tracked as CVE-2026-59851, allows an authenticated Kerberos principal to bypass authorization checks on servers with GSSAPIKeyExchange enabled, enabling arbitrary local user login and potential privilege escalation.

exploited libssh +2 vulnerability authorization-bypass privilege-escalation
1t 5c 22i
medium advisory

Libssh Denial-of-Service Vulnerability via Inefficient Regular Expression Processing (CVE-2026-0967)

CVE-2026-0967 is a denial-of-service vulnerability in libssh, stemming from inefficient regular expression processing that could lead to defense evasion and impact availability on affected systems.

libssh denial-of-service CVE-2026-0967 defense-evasion
2r 1t 1c