EulerOS 2.0 SP15 : libwebsockets (EulerOS-SA-2026-3990)

According to the versions of the libwebsockets packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lwssshparseplaintext of the file...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Libwebsockets vulnerabilities (USN-8822-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8822-1 advisory. It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

Reproduce-CVE-2025-32433 Reproduction, analysis, and patch st...

Erlang/OTP 27.3.2 SSH Remote Code Execution

Erlang/OTP SSH server versions prior to patched releases 27.3.3, 26.2.5.11, and 25.3.2.20 contain an SSH protocol message-handling flaw that can allow unauthenticated remote code execution. This submission provides vulnerability background and patch-analysis notes...

USN-8822-1: Libwebsockets vulnerabilities

It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. CVE-2026-10650 It was discovered that...

USN-8822-1 libwebsockets vulnerabilities

It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. CVE-2026-10650 It was discovered that...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak p...

RouterOS SSH Bypass Read-Only Access

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to errors in verifying the cryptographic signature during the incorrect comparison of the RSA public key assigned to the user. Exploiting this vulnerability allows a malicious actor to...

RouterOS SSH Privilege Escalation

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to changes in the user trust policy mask due to the introduction or modification of arguments. Exploiting this vulnerability can allow a malicious actor to increase their privileges remote...

[SECURITY] [DLA 4773-1] libssh2 security update

Debian LTS Advisory DLA-4773-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias September 05, 2026 https://wiki.debian.org/LTS Package : libssh2 Version : 1.10.0-3+deb12u1 CVE ID : CVE-2025-15661 CVE-2026-7598 CVE-2026-58050 CVE-2026-58051 CVE-2026-66032...

CVE-2026-56855

The golang.org/x/crypto/ssh package is vulnerable to a Denial of Service (DoS) condition where a malicious peer can send crafted messages after a channel is established to deadlock the entire connection . The root cause is the improper handling of channel messages, where certain messages would be...

RLSA-2026:62217 Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

libssh security update

An update is available for libssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...

RLSA-2026:62218 Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

CVE-2025-3243

🔐 CVE-2025-3243 SSH Checker Fast. Lean. No-BS. Python script for initial exposure check of the CVE-2025-3243 vulnerability related to the Erlang/OTP SSH client. This project was designed for quick triage , reduction of operational uncertainty , and attack surface validation in environments where...

ALSA-2026:62218 Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

SSH Protocol Analyzer DoS

The vulnerability of the SSH protocol analyzer and the network traffic analyzer in Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a attacker to cause a service failure...

[SECURITY] Fedora 44 Update: php-phpseclib3-3.0.56-1.fc44

MIT-licensed pure-PHP implementations of an arbitrary-precision integer arithmetic library, fully PKCS1 v2.1 compliant RSA, DES, 3DES, RC4, Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509...