wolfSSL Inc. wolfSSH vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20264

Newest CVEs

• CVE-2026-84897

  wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

  wolfSSL Inc. · wolfSSH

  Medium6.9
• CVE-2026-83742

  wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

  wolfSSL Inc. · wolfSSH

  Medium5.3
• CVE-2026-81535

  wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check

  wolfSSL Inc. · wolfSSH

  Medium6.3
• CVE-2026-16516

  wolfSSH ECDSA host key curve not validated against negotiated algorithm

  wolfSSL Inc. · wolfSSH

  Critical9.0
• CVE-2024-2873

  User authentication bypass in wolfSSH server

  wolfSSL Inc. · wolfSSH

  Critical9.1