CVE-2026-59845

—

CVSS 3.1

5.9 medium

EPSS

<1%p1

Published

Jul 21, 2026 (Jul 21, 2026)

Modified

Sep 1, 2026

Description

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.

Vendors: libssh redhat
Products: libssh, hardened images, enterprise linux
Weakness: CWE-390
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.