Skip to content
Llibssh2
Products
| Product | CVEs | Exploited | Latest |
| libssh2 | 9 | – | Jul 24, 2026 |
Exploited and recent CVEs
-
CVE-2026-66035
High 7.5
libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
0.5%
-
CVE-2026-66034
High 7.5
libssh2 Heap Out-of-Bounds Read via publickey subsystem
0.4%
-
CVE-2026-66033
High 7.5
libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation
0.6%
-
CVE-2026-66032
High 8.8
libssh2 Double-Free Heap Corruption via sftp_open()
0.4%
-
CVE-2026-58051
Medium 6.5
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
0.3%
-
CVE-2026-58050
High 7.0
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
0.4%
-
CVE-2025-15661
Medium 6.5
libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c
0.6%
-
CVE-2026-55200
High 8.1
libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c
3.9%
-
CVE-2026-55199
Medium 5.9
libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler
0.9%