PT-2026-1659 · Libssh+4 · Libssh+4

Daniel Stenberg + 1 · Published 2025-01-01 · Updated 2026-05-04 · CVE-2025-15079

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions libssh (affected versions not specified)

Description The libssh software contains a flaw related to a global knownhost override. This issue could potentially allow an attacker to bypass host key verification, potentially leading to man-in-the-middle attacks. The issue involves the way libssh handles known hosts, allowing for a global override of host key checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-297

Related Identifiers

BDU:2026-03453

CVE-2025-15079

ECHO-77BA-E0AF-7BBD

JLSEC-2026-430

MGASA-2026-0003

OESA-2026-1190

OESA-2026-1191

OESA-2026-1192

OESA-2026-1193

OESA-2026-1194

OESA-2026-1195

OPENSUSE-SU-2026:10017-1

OPENSUSE-SU-2026:20031-1

RHSA-2026:6893

SUSE-SU-2026:0050-1

SUSE-SU-2026:0051-1

SUSE-SU-2026:0052-1

SUSE-SU-2026:0066-1

SUSE-SU-2026:0508-1

SUSE-SU-2026:20042-1

SUSE-SU-2026:20062-1

SUSE-SU-2026:20082-1

SUSE-SU-2026:20110-1

USN-8062-1

USN-8062-2

Affected Products

Debian

Linuxmint

Red Os

Ubuntu

Libssh

References · 96

• 🔥 https://hackerone.com/reports/3477116 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:0508-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8062-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1192 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-15079 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0066-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-11563 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0052-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2026/01/07/6 · Patch
• https://ubuntu.com/security/CVE-2025-10148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14017 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10017-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20042-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20062-1 · Vendor Advisory