CyberRota Analysis
AI-GeneratedA vulnerability in OpenSSL's libssh allows an attacker to bypass integrity protection due to incorrect AES-GCM finalization checks, potentially enabling them to modify plaintext data in transit undetected. This flaw poses a medium risk, particularly for environments relying on secure communications where data integrity is critical. Organizations using OpenSSL should prioritize patching to mitigate the risk of exploitation.
CVE
CVE-2026-59847
Severity
MEDIUM
CVSS
5.9
EPSS
0.31%
OpenSSL
Original NVD Description
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)