WO
Vendor
wolfSSH
12
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84897 | WO Wolfssh Wolfssh | 5.3 | Oct 7 | wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion |
| CVE-2026-83742 | WO Wolfssh Wolfssh | 8.8 | Oct 7 | wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms |
| CVE-2026-83540 | WO Wolfssh Wolfssh | 8.8 | Oct 7 | wolfSSHd on Windows race condition leading to logon token reused across connections |
| CVE-2026-81535 | WO Wolfssh Wolfssh | 9.1 | Oct 7 | wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check |
| CVE-2026-16516 | WO Wolfssh Wolfssh | 7.4 | Oct 7 | wolfSSH ECDSA host key curve not validated against negotiated algorithm |
| CVE-2026-0930 | WO Wolfssh Wolfssh | 4.3 | Apr 20 | Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize |
| CVE-2025-15382 | WO Wolfssh Wolfssh | 8.1 | Jan 6 | Client SCP Request Triggers Buffer Overread by 1 Byte |
| CVE-2025-14942 | WO Wolfssh Wolfssh | 9.8 | Jan 6 | Authentication Bypass |
| CVE-2025-11625 | WO Wolfssh Wolfssh | 9.8 | Oct 21 | Host verification bypass and credential leak |
| CVE-2025-11624 | WO wolfSSH wolfSSH | 9.8 | Oct 21 | Buffer overwrite when processing file handles with the SFTP server |
| CVE-2024-2873 | WO Wolfssh Wolfssh | 9.1 | Mar 25 | User authentication bypass in wolfSSH server |
| CVE-2022-32073 | WO Wolfssh Wolfssh | 9.8 | Jul 13 | WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR |