CVE-2026-0965EPSS p4.3%
CVE-2026-0965CVE-2026-0965
libssh / libssh
Description
A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.
Scoring
| CVSS | 3.3 () |
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
| EPSS | 0.16% probability of exploitation · percentile 4.3% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-01 |