Search: CVE-2026-39827

CVE-2026-39827 is a medium severity vulnerability in the golang.org/x/crypto/ssh package that causes a memory leak. When an authenticated SSH client repeatedly opens channels that the server rejects, the rejected channels are not properly removed from the server's internal state. This leads to unbounded memory growth, which can crash the server process and disrupt all connected users.