ZeroDay Findings
Sign inSign up

Findings

CVE-2026-0966

A flaw was found in libssh.

Published Mar 26, 2026 · updated Sep 1, 2026 · libssh libssh

A flaw was found in libssh. The API function is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server's logging verbosity is set to or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon process.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 26, 2026 · NIST NVD

    Detected

    A flaw was found in libssh. The API function is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server's logging verbosity is set to or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon proc

  2. Sep 1, 2026 · NIST NVD

    Updated

    A flaw was found in libssh. The API function is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server's logging verbosity is set to or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon proc

Affected

  • cpe libssh/libsshversion unspecified
  • cpe redhat/enterprise linux10.0
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0
  • cpe redhat/hardened imagesversion unspecified
  • cpe redhat/openshift container platform4.0

Sources

  • CVE.orgVulnerability recordCVE-2026-0966

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-0966

    A flaw was found in libssh. The API function is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server'

    nvd.nist.gov

References