EUVD-2026-48722

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...

PT-2026-61022

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1 Description An issue exists during the capability negotiation phase when processing RDP Confirm Active PDU. The parser fails to perform sufficient length validation for specific capability sets. A remote,...

SSH Protocol Packet Sequence Manipulation

The vulnerability of the SSH protocol lies in the ability to alter the sequence numbers of packets during the connection negotiation process, thereby eliminating any number of SSH protocol messages. Exploiting this vulnerability allows a malicious actor to bypass integrity checks, disable existin...