libssh: libssh: denial of service via automatic certificate authentication loop

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

CVE-2026-59849

CVE-2026-59849 affects libssh. Connected advisories show a denial-of-service caused by a logic/loop in automatic certificate-based public key authentication that can loop when certificates are missing or repeatedly rejected. Victim scenario: libssh clients may experience indefinite looping, leadi...