SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-59851

HIGH · CVSS 8.8 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A vulnerability in the libssh library affects Exchange servers with GSSAPIKeyExchange enabled, allowing authenticated clients to bypass authorization checks and log in as arbitrary users. This poses a significant security risk, potentially leading to unauthorized access and data breaches. Organizations using affected Exchange servers should prioritize patching this flaw to mitigate the risk of exploitation.

CVE
CVE-2026-59851
Severity
HIGH
CVSS
8.8
EPSS
0.29%
Exchange

Original NVD Description

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-82343 MEDIUM CVE-2026-82330 MEDIUM CVE-2026-82328 MEDIUM CVE-2026-82324 MEDIUM CVE-2026-80101 MEDIUM CVE-2026-78475 MEDIUM