L
Vendor security profile
libssh
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs26
Critical0
CISA KEV0
Public exploit0
Patch rate%23
Avg. CVSS5.2
12-month vulnerability rate
0
0
0
0
5
1
0
0
11
0
0
0
CVE KEV
CVE severity distribution
26toplam CVE
High3 (12%)
Medium15 (58%)
Low8 (31%)
Patch and exploitation view
%23
Verified patch
%0
CISA KEV
%0
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
20Unknown
Latest vulnerabilities
7.5
CVE-2026-66035
Vulnerability in Libssh2
L
Patch verifiedEPSS %0
7.5
CVE-2026-66034
Out-of-bounds read in Libssh2
L
Patch verifiedEPSS %0
7.5
CVE-2026-66033
Out-of-bounds read in Libssh2
L
Patch verifiedEPSS %1
8.8
CVE-2026-66032
Vulnerability in Libssh2
L
Patch verifiedEPSS %0
8.8
CVE-2026-59851
Libssh: libssh: authentication bypass via missing gssapi principal check
RH
Patch status unknownEPSS %0
4.3
CVE-2026-59850
Libssh: libssh: use-after-free via data callbacks on closed channels
RH
Patch status unknownEPSS %0
3.1
CVE-2026-59849
Libssh: libssh: denial of service via automatic certificate authentication loop
RH
Patch status unknownEPSS %0
5.3
CVE-2026-59848
Libssh: libssh: denial of service via sftp responses with unknown request ids
RH
Patch status unknownEPSS %0
5.9
CVE-2026-59847
Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
RH
Patch status unknownEPSS %0
3.9
CVE-2026-59846
Libssh: libssh: information disclosure via proxycommand %r username expansion
RH
Patch status unknownEPSS %0