[NEW] [high] libssh: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in libssh to gain elevated privileges, bypass security measures, disclose confidential information, trigger a denial-of-service attack, and manipulate data.
CSIRTS triage
- What
- Multiple vulnerabilities can be exploited to gain elevated privileges, bypass security measures, disclose information, trigger denial-of-service attacks, and manipulate data.
- Who is affected
- Users of libssh.
- Urgency
- Remediation is high urgency due to the potential for severe impacts from exploitation.
- Action
- Update to the latest version of libssh.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch libssh
Get an email when a new libssh advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2428
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-153700.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-598420.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all scored CVEs.
- Low exploitation riskCVE-2026-598430.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all scored CVEs.
- Low exploitation riskCVE-2026-598440.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all scored CVEs.
- Low exploitation riskCVE-2026-598450.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
- Low exploitation riskCVE-2026-598460.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
- Low exploitation riskCVE-2026-598470.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all scored CVEs.
- Low exploitation riskCVE-2026-598480.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
- Low exploitation riskCVE-2026-598490.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.
- Low exploitation riskCVE-2026-598500.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-15370 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59842 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59843 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59844 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59845 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59846 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59847 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59848 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59849 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59850 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-59851 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- highCVE-2026-59851: A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path d…nvd
- mediumCVE-2026-59850: A flaw was found in libssh. If data packets are processed after a channel is closed, channel d…nvd
- lowCVE-2026-59849: A flaw was found in libssh. Logic errors in automatic certificate-based public key authenticat…nvd
- mediumCVE-2026-59848: A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs…nvd
- mediumCVE-2026-59847: A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL …nvd
- lowCVE-2026-59846: A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling …nvd
- mediumCVE-2026-59845: A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stor…nvd
- mediumCVE-2026-59844: A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with…nvd
- mediumCVE-2026-59843: A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet si…nvd
- lowCVE-2026-59842: A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve255…nvd
- mediumCVE-2026-15370: A flaw was found in libssh. During SFTP server directory listing, the longname field is constr…nvd
- lowCVE-2026-59846: Libssh: libssh: information disclosure via proxycommand %r username expansionmsrc
Recent advisories for libssh
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[UPDATE] [medium] libssh: Vulnerability allows Denial of Servicecert-bund · 2026-07-28
- highCVE-2026-59851: A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path d…nvd · 2026-07-21
- mediumCVE-2026-59850: A flaw was found in libssh. If data packets are processed after a channel is closed, channel d…nvd · 2026-07-21
- lowCVE-2026-59849: A flaw was found in libssh. Logic errors in automatic certificate-based public key authenticat…nvd · 2026-07-21
- mediumCVE-2026-59848: A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs…nvd · 2026-07-21
- mediumCVE-2026-59847: A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL …nvd · 2026-07-21
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack2026-07-31