libssh2 vulnerabilities
9 published CVEs name libssh2 among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-66035
libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
libssh2 · libssh2
High7.7 - CVE-2026-66034
libssh2 Heap Out-of-Bounds Read via publickey subsystem
libssh2 · libssh2
High7.7 - CVE-2026-66033
libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation
libssh2 · libssh2
High8.7 - CVE-2026-66032
libssh2 Double-Free Heap Corruption via sftp_open()
libssh2 · libssh2
High8.7 - CVE-2026-58051
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
libssh2 · libssh2
High8.3 - CVE-2026-58050
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
libssh2 · libssh2
High8.3 - CVE-2025-15661
libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c
libssh2 · libssh2
High8.3 - CVE-2026-55200
libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c
libssh2 · libssh2
Critical9.2 - CVE-2026-55199
libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler
libssh2 · libssh2
High8.2