CVE-2026-59849

Published: Jul 21, 2026Modified: Aug 19, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.

Affected (3)

Products: Libssh: Libssh · Redhat: Enterprise Linux, Hardened Images

1 product

2 products

Enterprise Linux

Hardened Images

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Libssh Libssh	All versions
Redhat Enterprise Linux	Version 10.0
Redhat Hardened Images	All versions

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (4)

https://access.redhat.com/errata/RHSA-2026:42922

Source: secalert@redhat.com

Issue Tracking

https://access.redhat.com/errata/RHSA-2026:55855

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-59849

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2498182

Source: secalert@redhat.com

Issue TrackingVendor Advisory

Timeline

No history available yet.