Log in Start free

Vulnerability · Published Jul 21, 2026 · Assigned by redhat

CVE-2026-59842Libssh: libssh: information disclosure via short gssapi curve25519 public key

Low 3.7

In plain English

A low-severity out-of-bounds read in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.5%top 57.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10libssh0.12.0-3.el10_2ALSA-2026:55855
AlmaLinux:10libssh-config0.12.0-3.el10_2ALSA-2026:55855
AlmaLinux:10libssh-devel0.12.0-3.el10_2ALSA-2026:55855
Alpine:v3.24libssh0.12.1-r0ALPINE-CVE-2026-59842
Debian:14libssh0.12.1-1DEBIAN-CVE-2026-59842
Rocky Linux:10libssh0:0.12.0-3.el10_2RLSA-2026:55855
Ubuntu:22.04:LTSlibsshno fix listedUBUNTU-CVE-2026-59842
Ubuntu:24.04:LTSlibsshno fix listedUBUNTU-CVE-2026-59842
Ubuntu:26.04:LTSlibsshno fix listedUBUNTU-CVE-2026-59842

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References