CVE-2026-66032 libssh2 Double-Free Heap Corruption via sftp_open()

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...

Cisco UCS Integrated Management Controller < 2.3(1) DoS (cisco-sa-20140908-ucse)

According to its self-reported version, the remote device is running a version of Cisco Integrated Management Controller IMC prior to 2.31 running on an E-series blade server. It is, therefore, affected by a flaw allowing a remote attacker to cause a denial of service by sending a specially craft...