CVE-2026-59847 — Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker t…
Published: 2026-07-21 · CVSS: 5.9 · CVSS 3.1
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7