CVE-2026-0966

A flaw was found in libssh. The API function "sshgethexa" is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI Generic Security Service Application Program Interface authentication if the server's logging verbosity is...