CVE detail
CVE-2026-59850
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 3
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
3 source links · newest first
- https://access.redhat.com/errata/RHSA-2026:42922access.redhat.com
No excerpt available.
Exploitaccess.redhat.comJul 21, 2026, 3:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2498183bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJul 21, 2026, 3:16 PM - https://access.redhat.com/security/cve/CVE-2026-59850access.redhat.com
No excerpt available.
Exploitaccess.redhat.comJul 21, 2026, 3:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-71226CVSS 7.3 · High
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into…
- CVE-2026-13595CVSS 6.8 · Medium
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a paren…
- CVE-2026-59851CVSS 8.8 · High
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the req…
- CVE-2026-59849CVSS 3.1 · Low
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are mi…
- CVE-2026-59848CVSS 5.3 · Medium
A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and cl…
- CVE-2026-59847CVSS 5.9 · Medium
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to…