https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:32:22.630462+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-59847 CVE-2026-59847 — Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification 2026-09-28T09:32:22.930281+00:00

Affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.