wolfSSL Inc. wolfSSH vulnerabilities
5 published CVEs name wolfSSL Inc. wolfSSH among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
wolfSSL Inc. · wolfSSH
Medium6.9 - CVE-2026-83742
wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
wolfSSL Inc. · wolfSSH
Medium5.3 - CVE-2026-81535
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
wolfSSL Inc. · wolfSSH
Medium6.3 - CVE-2026-16516
wolfSSH ECDSA host key curve not validated against negotiated algorithm
wolfSSL Inc. · wolfSSH
Critical9.0 - CVE-2024-2873
User authentication bypass in wolfSSH server
wolfSSL Inc. · wolfSSH
Critical9.1