AZL-85451 CVE-2026-7598 affecting package libssh2 for versions less than 1.11.1-2

🗓️ 01 May 2026 22:16:16Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Integer overflow in libssh2 up to 1.11.1 via username_len/password_len in userauth_password.

Reporter	Title	Published	Views	Family All 107
IBM Security Bulletins	Security Bulletin: Unrestricted upload of file with dangerous type, improper certificate validation, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	24 Jun 202616:05	–	ibm
ATTACKERKB	CVE-2026-7598	1 May 202621:30	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : libssh2, libssh2-devel (ALAS2023-2026-1779)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : cargo-c (ALAS2023-2026-1872)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libssh2, --advisory ALAS2-2026-3329 (ALAS-2026-3329)	8 Jun 202600:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-7598)	6 May 202600:00	–	nessus
Tenable Nessus	Debian dsa-6365 : libssh2-1-dev - security update	26 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2543)	10 Jul 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-2603)	10 Jul 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2659)	14 Jul 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-7598

31 Aug 2026 05:26Current

6.8Medium risk

Vulners AI Score6.8

CVSS 46.9

CVSS 3.19.1

CVSS 27.5

CVSS 37.3

EPSS0.00466

SSVC