CVE-2026-66034

creationtimestamp| type| source ---|---|--- 2026-07-24 18:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrfwnsgj2k2q...

CVE-2026-66034

Impact: libssh2 up to 1.11.1 contains a missing bounds check in libssh2_publickey_list_fetch() that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and to free an uninitialized pointer during error cleanup. This leaks heap pointers from adjacent allocations, d...