Skip to content
Threat Feed
Subscribe

Vendor

Libssh

2 briefs RSS
low advisory

Information Disclosure Vulnerability in libssh

A vulnerability in libssh (CVE-2023-6004) allows a remote, authenticated attacker to disclose sensitive information due to improper handling of SSH agent forwarding requests.

libssh
1t 1c
high threat

CVE-2026-59851: Libssh GSSAPIKeyExchange Authorization Bypass

A vulnerability in libssh, tracked as CVE-2026-59851, allows an authenticated Kerberos principal to bypass authorization checks on servers with GSSAPIKeyExchange enabled, enabling arbitrary local user login and potential privilege escalation.

exploited libssh +2 vulnerability authorization-bypass privilege-escalation
1t 5c 22i