CVE-2026-59848

Description

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

CVSS Vector

References

• https://access.redhat.com/security/cve/CVE-2026-59848
• https://bugzilla.redhat.com/show_bug.cgi?id=2498181