CVE-2026-0966High· 8.2▾ TwilightA flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Progr…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
A flaw was found in libssh. The API function ssh_get_hexa() is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server's logging verbosity is set to SSH_LOG_PACKET (3) or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon process.
libssh < 0.11.4hardened_imagesopenshift_container_platform = 4.0enterprise_linux = 8.0enterprise_linux = 9.0enterprise_linux = 10.0Upgrade past the affected range:
libssh 0.11.4Connected by shared product, vendor, weakness, or advisory.
CVE-2026-0968Low· 3.1A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation
CVE-2026-0967Medium· 5.5A flaw was found in libssh
CVE-2026-0964Medium· 6.3A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user exec…
CVE-2026-0965Low· 3.3A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing
CVE-2025-8114Medium· 4.7A flaw was found in libssh, a library that implements the SSH protocol
CVE-2025-5351Medium· 6.5A flaw was found in the key export functionality of libssh