CVE-2026-59842 – Libssh: libssh: information disclosure via short gssapi curve25519 public key

CVE ID :CVE-2026-59842

Published : July 21, 2026, 11:08 a.m. | 36 minutes ago

Description :A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

Severity: 3.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…