# CVE-2026-0930: Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated…

Source: https://junglewise.ai/threats/cve-2026-0930-potential-read-out-of-bounds-case-with-wolfsshd-on-windows-while  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-20  
License: CC BY 4.0 with a link back

CVE-2026-0930 · Severity: medium · CVSS 4.3 · Published 2026-04-20

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output.

Technologies: [Wolfssh](https://junglewise.ai/threats/technologies/wolfssh). Vendors: [Wolfssh](https://junglewise.ai/threats/vendors/wolfssh).

## Quick answers

**Is CVE-2026-0930 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0930 being exploited in the wild.

**How severe is CVE-2026-0930?** Medium severity, with a CVSS score of 4.3, published 20 April 2026.

**Which products and versions are affected?** Wolfssh. The advisory does not name versions.

**Is there a fix for CVE-2026-0930?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-0930?** Check whether you run Wolfssh. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Wolfssh

## Related threats

- [A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote…](https://junglewise.ai/threats/cve-2025-15382-a-heap-buffer-over-read-vulnerability-exists-in-the-wolfssh)
- [wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client…](https://junglewise.ai/threats/cve-2025-14942-wolfssh-s-key-exchange-state-machine-can-be-manipulated-to-leak)
- [Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication…](https://junglewise.ai/threats/cve-2025-11625-improper-host-authentication-vulnerability-in-wolfssh-version-1-4)
- [Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size…](https://junglewise.ai/threats/cve-2025-11624-potential-stack-buffer-overwrite-on-the-sftp-server-side-when)