CVE-2025-14821

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...

CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...

CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...

CVE-2025-14821

CVE-2025-14821 concerns the libssh library. Multiple connected records describe a flaw where an insecure Windows default configuration causes libssh to load configuration files from C:\etc, which can be created or modified by unprivileged local users. This enables local man-in-the-middle attacks,...

CVE-2025-14821

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...

CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an...

PT-2026-30900

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh that allows local man-in-the-middle attacks, security downgrades of SSH Secure Shell connections, and manipulation of trusted host information. This poses a risk to the...

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...

Libssh: libssh: denial of service due to malformed sftp message

...

ROOT-OS-DEBIAN-12-CVE-2025-5987 CVE-2025-5987 in rootio-libssh - Patched by Root

Root has patched CVE-2025-5987 in the rootio-libssh package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-4877 CVE-2025-4877 in rootio-libssh - Patched by Root

Root has patched CVE-2025-4877 in the rootio-libssh package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-5318 CVE-2025-5318 in rootio-libssh - Patched by Root

Root has patched CVE-2025-5318 in the rootio-libssh package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-8114 CVE-2025-8114 in rootio-libssh - Patched by Root

Root has patched CVE-2025-8114 in the rootio-libssh package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-5351 CVE-2025-5351 in rootio-libssh - Patched by Root

Root has patched CVE-2025-5351 in the rootio-libssh package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-5372 CVE-2025-5372 in rootio-libssh - Patched by Root

Root has patched CVE-2025-5372 in the rootio-libssh package for Root:Debian:12. Multiple fixed versions available...

Libssh: improper sanitation of paths received from scp servers

...

Libssh: buffer underflow in ssh_get_hexa() on invalid input

...

Libssh: libssh: denial of service via inefficient regular expression processing

...

Libssh: libssh: denial of service via improper configuration file handling

...

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2026-1472)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1472 advisory. libssh: SCP Protocol Path Traversal in sshscppullrequest CVE-2026-0964 libssh: Specially crafted patterns could cause DoS CVE-2026-0967 Tenable has extracted the preceding description block...