Skip to content
THREATWIRE

CVE Tracker · Vendor

Wolfssh CVEs

5 CVEs in the tracker.

All vendors · RSS feed for Wolfssh · Tracker data last updated 18 Oct 2026.

Showing 5 of 5

  1. CVE-2026-84897CVSS 5.3 mediumEPSS 0.30%2026-10-07

    wolfssh. src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange mes…

  2. CVE-2026-83742CVSS 8.8 highEPSS 0.39%2026-10-07

    wolfssh. Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-…

  3. CVE-2026-83540CVSS 8.8 highEPSS 0.36%2026-10-07

    wolfssh. When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token…

  4. CVE-2026-81535CVSS 9.1 criticalEPSS 0.27%2026-10-07

    wolfssh. In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip c…

  5. CVE-2026-16516CVSS 7.4 highEPSS 0.12%2026-10-07

    wolfssh. wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorith…