# Libssh vulnerabilities Source: https://junglewise.ai/threats/technologies/libssh Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/libssh.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 26 vulnerabilities in Libssh: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59851, was published on 21 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 26 (0 critical, 0 exploited in the wild) ## About Libssh C library implementing the SSH protocol for secure remote communication and file transfer. ## Latest Libssh vulnerabilities - [CVE-2026-59851: libssh authentication bypass in GSSAPIKeyExchange](https://junglewise.ai/threats/cve-2026-59851-libssh-authentication-bypass-in-gssapikeyexchange) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-59850: libssh use-after-free in channel data callbacks](https://junglewise.ai/threats/cve-2026-59850-libssh-use-after-free-in-channel-data-callbacks) (medium, CVSS 4.3, published 21 Jul 2026) - [CVE-2026-59849: libssh infinite loop in certificate-based authentication](https://junglewise.ai/threats/cve-2026-59849-libssh-infinite-loop-in-certificate-based-authentication) (low, CVSS 3.1, published 21 Jul 2026) - [CVE-2026-59848: libssh denial of service via memory exhaustion in SFTP client](https://junglewise.ai/threats/cve-2026-59848-libssh-denial-of-service-via-memory-exhaustion-in-sftp-client) (medium, CVSS 5.3, published 21 Jul 2026) - [CVE-2026-59847: libssh integrity protection bypass in OpenSSL AES-GCM backend](https://junglewise.ai/threats/cve-2026-59847-libssh-integrity-protection-bypass-in-openssl-aes-gcm-backend) (medium, CVSS 5.9, published 21 Jul 2026) - [CVE-2026-59846: libssh shell metacharacter injection in ProxyCommand username expansion](https://junglewise.ai/threats/cve-2026-59846-libssh-shell-metacharacter-injection-in-proxycommand-username) (low, CVSS 3.9, published 21 Jul 2026) - [CVE-2026-59845: libssh denial of service via unchecked fork failure in ProxyCommand](https://junglewise.ai/threats/cve-2026-59845-libssh-denial-of-service-via-unchecked-fork-failure-in) (medium, CVSS 5.3, published 21 Jul 2026) - [CVE-2026-59844: libssh denial of service via oversized SFTP read length](https://junglewise.ai/threats/cve-2026-59844-libssh-denial-of-service-via-oversized-sftp-read-length) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-59843: libssh denial of service via zero maximum packet size](https://junglewise.ai/threats/cve-2026-59843-libssh-denial-of-service-via-zero-maximum-packet-size) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-59842: libssh out-of-bounds read in GSSAPI Curve25519 key exchange](https://junglewise.ai/threats/cve-2026-59842-libssh-out-of-bounds-read-in-gssapi-curve25519-key-exchange) (low, CVSS 3.7, published 21 Jul 2026) - [CVE-2026-15370: libssh stack buffer overflow in SFTP server directory listing](https://junglewise.ai/threats/cve-2026-15370-libssh-stack-buffer-overflow-in-sftp-server-directory-listing) (medium, CVSS 6.7, published 21 Jul 2026) - [CVE-2025-14821: libssh insecure default configuration on Windows](https://junglewise.ai/threats/cve-2025-14821-libssh-insecure-default-configuration-on-windows) (high, CVSS 7.8, published 7 Apr 2026) - [CVE-2026-0968: libssh heap out-of-bounds read in sftp_parse_longname](https://junglewise.ai/threats/cve-2026-0968-libssh-heap-out-of-bounds-read-in-sftp-parse-longname) (low, CVSS 3.1, published 26 Mar 2026) - [CVE-2026-0967: libssh ReDoS in match_pattern function](https://junglewise.ai/threats/cve-2026-0967-libssh-redos-in-match-pattern-function) (medium, CVSS 5.5, published 26 Mar 2026) - [CVE-2026-0966: libssh denial of service in ssh_get_hexa function](https://junglewise.ai/threats/cve-2026-0966-libssh-denial-of-service-in-ssh-get-hexa-function) (high, CVSS 8.2, published 26 Mar 2026) - [CVE-2026-0965: libssh Denial of Service via arbitrary file access in configuration parsing](https://junglewise.ai/threats/cve-2026-0965-libssh-denial-of-service-via-arbitrary-file-access-in) (low, CVSS 3.3, published 26 Mar 2026) - [CVE-2026-0964: libssh SCP path traversal in ssh_scp_pull_request](https://junglewise.ai/threats/cve-2026-0964-libssh-scp-path-traversal-in-ssh-scp-pull-request) (medium, CVSS 6.3, published 26 Mar 2026) - [CVE-2025-8277: libssh memory exhaustion via repeated key exchange guesses](https://junglewise.ai/threats/cve-2025-8277-libssh-memory-exhaustion-via-repeated-key-exchange-guesses) (low, CVSS 3.1, published 9 Sep 2025) - [CVE-2025-4877: libssh heap overflow in binary to base64 conversion](https://junglewise.ai/threats/cve-2025-4877-libssh-heap-overflow-in-binary-to-base64-conversion) (medium, CVSS 4.5, published 20 Aug 2025) - [CVE-2025-5449: libssh integer overflow in SFTP server message decoding](https://junglewise.ai/threats/cve-2025-5449-libssh-integer-overflow-in-sftp-server-message-decoding) (medium, CVSS 6.5, published 25 Jul 2025) - [CVE-2025-8114: libssh NULL pointer dereference in KEX session ID calculation](https://junglewise.ai/threats/cve-2025-8114-libssh-null-pointer-dereference-in-kex-session-id-calculation) (medium, CVSS 4.7, published 24 Jul 2025) - [CVE-2025-4878: libssh uninitialized variable in privatekey_from_file](https://junglewise.ai/threats/cve-2025-4878-libssh-uninitialized-variable-in-privatekey-from-file) (low, CVSS 3.6, published 22 Jul 2025) - [CVE-2025-5987: libssh improper error handling in ChaCha20 cipher initialization](https://junglewise.ai/threats/cve-2025-5987-libssh-improper-error-handling-in-chacha20-cipher-initialization) (high, CVSS 8.1, published 7 Jul 2025) - [CVE-2025-5351: libssh double free in key export functionality](https://junglewise.ai/threats/cve-2025-5351-libssh-double-free-in-key-export-functionality) (medium, CVSS 6.5, published 4 Jul 2025) - [CVE-2025-5372: libssh incorrect return code handling in ssh_kdf](https://junglewise.ai/threats/cve-2025-5372-libssh-incorrect-return-code-handling-in-ssh-kdf) (medium, CVSS 5, published 4 Jul 2025) ## Most severe Libssh vulnerabilities - [CVE-2026-59851: libssh authentication bypass in GSSAPIKeyExchange](https://junglewise.ai/threats/cve-2026-59851-libssh-authentication-bypass-in-gssapikeyexchange) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-0966: libssh denial of service in ssh_get_hexa function](https://junglewise.ai/threats/cve-2026-0966-libssh-denial-of-service-in-ssh-get-hexa-function) (high, CVSS 8.2, published 26 Mar 2026) - [CVE-2025-5987: libssh improper error handling in ChaCha20 cipher initialization](https://junglewise.ai/threats/cve-2025-5987-libssh-improper-error-handling-in-chacha20-cipher-initialization) (high, CVSS 8.1, published 7 Jul 2025) - [CVE-2025-14821: libssh insecure default configuration on Windows](https://junglewise.ai/threats/cve-2025-14821-libssh-insecure-default-configuration-on-windows) (high, CVSS 7.8, published 7 Apr 2026) - [CVE-2026-15370: libssh stack buffer overflow in SFTP server directory listing](https://junglewise.ai/threats/cve-2026-15370-libssh-stack-buffer-overflow-in-sftp-server-directory-listing) (medium, CVSS 6.7, published 21 Jul 2026) - [CVE-2025-5449: libssh integer overflow in SFTP server message decoding](https://junglewise.ai/threats/cve-2025-5449-libssh-integer-overflow-in-sftp-server-message-decoding) (medium, CVSS 6.5, published 25 Jul 2025) - [CVE-2025-5351: libssh double free in key export functionality](https://junglewise.ai/threats/cve-2025-5351-libssh-double-free-in-key-export-functionality) (medium, CVSS 6.5, published 4 Jul 2025) - [CVE-2026-59844: libssh denial of service via oversized SFTP read length](https://junglewise.ai/threats/cve-2026-59844-libssh-denial-of-service-via-oversized-sftp-read-length) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-59843: libssh denial of service via zero maximum packet size](https://junglewise.ai/threats/cve-2026-59843-libssh-denial-of-service-via-zero-maximum-packet-size) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-0964: libssh SCP path traversal in ssh_scp_pull_request](https://junglewise.ai/threats/cve-2026-0964-libssh-scp-path-traversal-in-ssh-scp-pull-request) (medium, CVSS 6.3, published 26 Mar 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Libssh vulnerabilities", https://junglewise.ai/threats/technologies/libssh, 9 November 2026.