WO
Product
wolfSSH
12
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 6High 4Medium 2Low 0
Watch
Add wolfSSH to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-83742 | 8.8 | Oct 7 | wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms Affected: 1.4.11 before 1.6.0 |
| CVE-2026-83540 | 8.8 | Oct 7 | wolfSSHd on Windows race condition leading to logon token reused across connections Affected: 1.4.15 before 1.6.0 |
| CVE-2025-15382 | 8.1 | Jan 6 | Client SCP Request Triggers Buffer Overread by 1 Byte Affected: 1.4.12 before 1.4.22 |
| CVE-2026-16516 | 7.4 | Oct 7 | wolfSSH ECDSA host key curve not validated against negotiated algorithm Affected: before 1.6.0 |
Showing 4