CyberRota Analysis
AI-GeneratedA logic error in libssh can cause clients to enter an infinite loop during automatic certificate-based public key authentication when the required certificates are missing or rejected by the server, resulting in a denial of service. While the severity is classified as low, organizations utilizing libssh should prioritize addressing this vulnerability to prevent potential service disruptions.
CVE
CVE-2026-59849
Severity
LOW
CVSS
3.1
EPSS
0.24%
Original NVD Description
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)