Product by Open Source
Libssh2
9 known vulnerabilities in Libssh2 (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-55200 | libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c | 8.3 | |
| High | CVE-2025-15661 | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c | 6.5 | |
| High | CVE-2026-55199 | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler | 5.9 | |
| High | CVE-2026-66033 | libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation | 7.5 | |
| High | CVE-2026-66032 | libssh2 Double-Free Heap Corruption via sftp_open() | 8.8 | |
| High | CVE-2026-66035 | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation | 7.5 | |
| High | CVE-2026-58050 | libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation | 7.5 | |
| High | CVE-2026-66034 | libssh2 Heap Out-of-Bounds Read via publickey subsystem | 7.5 | |
| High | CVE-2026-58051 | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup | 6.5 |