wolfSSH
- Software type
- Other
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/13/2026, wolfSSH recorded 4 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of wolfSSH and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-84897wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusionCVE-2026-83742wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platformsCVE-2026-81535wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization checkCVE-2026-16516wolfSSH ECDSA host key curve not validated against negotiated algorithmCVE-2024-2873User authentication bypass in wolfSSH server| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-84897wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion | Exploitation statusNot exploited | FixYes | Published10/07/2026 | SeverityMedium |
CVE-2026-83742wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms | Exploitation statusNot exploited | FixYes | Published10/07/2026 | SeverityMedium |
CVE-2026-81535wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check | Exploitation statusNot exploited | FixYes | Published10/07/2026 | SeverityMedium |
CVE-2026-16516wolfSSH ECDSA host key curve not validated against negotiated algorithm | Exploitation statusNot exploited | FixYes | Published10/07/2026 | SeverityCritical |
CVE-2024-2873User authentication bypass in wolfSSH server | Exploitation statusNot exploited | FixYes | Published03/25/2024 | SeverityCritical |
5 Results | Page 1 of 1