libssh2 vulnerabilities

Newest CVEs

• CVE-2026-66035

  libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

  libssh2 · libssh2

  High7.7
• CVE-2026-66034

  libssh2 Heap Out-of-Bounds Read via publickey subsystem

  libssh2 · libssh2

  High7.7
• CVE-2026-66033

  libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation

  libssh2 · libssh2

  High8.7
• CVE-2026-66032

  libssh2 Double-Free Heap Corruption via sftp_open()

  libssh2 · libssh2

  High8.7
• CVE-2026-58051

  libssh2 - Free of Uninitialized Pointer in publickey List Cleanup

  libssh2 · libssh2

  High8.3
• CVE-2026-58050

  libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation

  libssh2 · libssh2

  High8.3
• CVE-2025-15661

  libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c

  libssh2 · libssh2

  High8.3
• CVE-2026-55200

  libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

  libssh2 · libssh2

  Critical9.2
• CVE-2026-55199

  libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler

  libssh2 · libssh2

  High8.2