libssh2

Products

ProductCVEsExploitedLatest
libssh29–Jul 24, 2026

Exploited and recent CVEs

  • CVE-2026-66035 High 7.5 libssh2 Heap Buffer Overflow via ETM Cipher Negotiation 0.5%
  • CVE-2026-66034 High 7.5 libssh2 Heap Out-of-Bounds Read via publickey subsystem 0.4%
  • CVE-2026-66033 High 7.5 libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation 0.6%
  • CVE-2026-66032 High 8.8 libssh2 Double-Free Heap Corruption via sftp_open() 0.4%
  • CVE-2026-58051 Medium 6.5 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup 0.3%
  • CVE-2026-58050 High 7.0 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation 0.4%
  • CVE-2025-15661 Medium 6.5 libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c 0.6%
  • CVE-2026-55200 High 8.1 libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 3.9%
  • CVE-2026-55199 Medium 5.9 libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler 0.9%