CVE-2026-43798Patch(apple / swiftnio_ssh)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apple swiftnio_ssh systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • swiftnio_ssh

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-08-27); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
swiftnio_ssh

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-27: 1Mentions · 2026-09-09: 1Patch / Workaround · 2026-08-27: 1Patch / Workaround · 2026-09-09: 1Technical Details · 2026-08-27: 108-2709-09
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Shell Drop iOS@ShellDropSshApp
    Patch

    Shell Drop terminal app on iOS 5.1.5 just went live in the App Store. Security fix! Get it. The SSH engine is updated to SwiftNIO SSH 0.15.0, which fixes CVE-2026-43798.

    Post summary

    The Shell Drop app update to SwiftNIO SSH 0.15.0 resolves CVE-2026-43798; no exploit or PoC details are provided.

    0000059
    19 followersView on X
  • Sami Laiho@samilaiho
    Patch

    Apple vulnerabilities URL: https://nvd.nist.gov/vuln/detail/cve-2026-43798 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8

    Post summary

    The text signals an Apple vulnerability (CVE-2026-43798) classified as critical with a high CVSS score and confirms an official fix, but contains no PoC or exploitation evidence.

    00000908
    30.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appappleswiftnio_ssh-swift-

Explore more