CVE-2026-59847

ADVISORY - nist

Summary

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

EPSS Score⁠: 0.00303 (0.224)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-1310⁠

Missing Ability to Patch ROM Code

CWE-253⁠

Incorrect Check of Function Return Value

Impacted images

Advisories

NIST

CREATED

1 month ago

UPDATED

1 day ago

ADVISORY IDCVE-2026-59847⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1310⁠CWE-253⁠

CVSS SCORE

5.9medium

Alpine

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDCVE-2026-59847⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

1 month ago

UPDATED

2 hours ago

ADVISORY IDCVE-2026-59847⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

1 month ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-59847⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium

Alma

CREATED

2 days ago

UPDATED

17 hours ago

ADVISORY IDALSA-2026:62217⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Alma

CREATED

2 days ago

UPDATED

17 hours ago

ADVISORY IDALSA-2026:62218⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDCVE-2026-59847⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.9medium

Rocky

CREATED

16 days ago

UPDATED

15 days ago

ADVISORY IDRLSA-2026:55855⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

20 hours ago

UPDATED

18 hours ago

ADVISORY IDRLSA-2026:62217⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Rocky

CREATED

20 hours ago

UPDATED

18 hours ago

ADVISORY IDRLSA-2026:62218⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Oracle

CREATED

17 days ago

UPDATED

17 days ago

ADVISORY IDELSA-2026-55855⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

21 days ago

UPDATED

21 days ago

ADVISORY ID

CGA-v4cc-8cp3-wgr7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY