Search: CVE-2026-46597

CVE-2026-46597 is a high-severity integer underflow vulnerability in the golang.org/x/crypto/ssh package. It is caused by an incorrect cast from bytes to int, leading to a server-side panic in the AES-GCM packet decoder when processing crafted inputs. This vulnerability results in a denial of service but does not impact confidentiality or integrity. There is no confirmed patch or official remediation available at this time. No known exploits have been reported in the wild. Users should monitor vendor advisories for updates.