VDB
CVE-2026-43798
CVE-2026-43798
PUBLISHED
CVSS 9.8 CRITICAL
Reported by apple · Published August 20, 2026
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1.
Risk Scores
CVSS 3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | swift-nio-ssh | 0 |
| Apple | swift-nio-ssh | 0, 0 |
Timeline
- Aug 20, 2026 CVE Published
- Aug 22, 2026 Coalition ESS Score
- Aug 24, 2026 EPSS Score
- Aug 26, 2026 CVE Updated
- Aug 27, 2026 EPSS Score
- Aug 27, 2026 Security Advisory
- Sep 1, 2026 EPSS Score
- Sep 6, 2026 EPSS Score
- Sep 9, 2026 EPSS Score
- Sep 12, 2026 EPSS Score
- Sep 16, 2026 EPSS Score
- Sep 18, 2026 EPSS Score