PULSE
LIVE23signals / 24h
FEED
ransomqilin reclama a Evergreen Title · US · Financial Servicesransomplay reclama a Tax MT · MT · Business Servicesransomplay reclama a Kreysler & Associates · US · Business Servicesransomnova reclama a La Financière d'Orion (finorion) · FR · Financial Servicesransomchaos reclama a argonautms.com · RU · Technologyransomdragonforce reclama a One Community FCU · US · Financial Servicesransomqilin reclama a RehaVital Gesundheitsservice GmbH · DE · Healthcareransomnova reclama a Tèrra Aventura · PT · Hospitality and Tourismransomnova reclama a Koperasi Karyawan PT Aplikanusa Lintasarta · ID · Telecommunicationransomakira reclama a Novasport s.r.o. · CZ · Consumer Servicesransomakira reclama a Finer & Finer · Consumer Servicesransommorpheus reclama a Kyowa Singapore Pte Ltd · SG · Business Servicesransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomqilin reclama a Evergreen Title · US · Financial Servicesransomplay reclama a Tax MT · MT · Business Servicesransomplay reclama a Kreysler & Associates · US · Business Servicesransomnova reclama a La Financière d'Orion (finorion) · FR · Financial Servicesransomchaos reclama a argonautms.com · RU · Technologyransomdragonforce reclama a One Community FCU · US · Financial Servicesransomqilin reclama a RehaVital Gesundheitsservice GmbH · DE · Healthcareransomnova reclama a Tèrra Aventura · PT · Hospitality and Tourismransomnova reclama a Koperasi Karyawan PT Aplikanusa Lintasarta · ID · Telecommunicationransomakira reclama a Novasport s.r.o. · CZ · Consumer Servicesransomakira reclama a Finer & Finer · Consumer Servicesransommorpheus reclama a Kyowa Singapore Pte Ltd · SG · Business Servicesransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Education
← All CVEs
CVE WatchJul 21, 2026

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity prote

CVSS

5.9

Medium

EPSS

KEV

Exploit Today

0

0-100

Published: Jul 21, 2026 · Last modified: Jul 21, 2026 · CWE-1310

EPSS · 30d

Not enough EPSS history yet.

Technical description

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

Official references
Related CVEs

No related CVEs by CWE or product.