Product by Open Source
Libssh
13 known vulnerabilities in Libssh (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2025-5318 | Libssh: out-of-bounds read in sftp_handle() | 5.4 | |
| High | CVE-2026-3731 | libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds | 5.3 | |
| High | CVE-2026-59851 | Libssh: libssh: authentication bypass via missing gssapi principal check | 8.8 | |
| Medium | CVE-2026-59843 | Libssh: libssh: denial of service via zero advertised channel packet size | 6.5 | |
| Medium | CVE-2026-59844 | Libssh: libssh: denial of service via oversized sftp read length | 6.5 | |
| High | CVE-2026-59847 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification | 5.9 | |
| High | CVE-2026-15370 | Libssh: libssh: stack buffer overflow in sftp server longname construction | 6.7 | |
| Medium | CVE-2026-59842 | Libssh: libssh: information disclosure via short gssapi curve25519 public key | 3.7 | |
| Medium | CVE-2026-59848 | Libssh: libssh: denial of service via sftp responses with unknown request ids | 5.3 | |
| High | CVE-2026-59850 | Libssh: libssh: use-after-free via data callbacks on closed channels | 4.3 | |
| High | CVE-2026-59849 | Libssh: libssh: denial of service via automatic certificate authentication loop | 3.1 | |
| Medium | CVE-2026-59845 | Libssh: libssh: denial of service via unchecked proxycommand fork() failure | 5.3 | |
| Low | CVE-2026-59846 | Libssh: libssh: information disclosure via proxycommand %r username expansion | 3.9 |