{"items":[{"id":"CVE-2026-66035","published":"2026-07-24T16:45:24.405Z","updated":"2026-07-28T01:06:26.873Z","title":"libssh2 Heap Buffer Overflow via ETM Cipher Negotiation","severity":"HIGH","score":7.7,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00472,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66034","published":"2026-07-24T16:42:18.764Z","updated":"2026-07-28T01:06:26.204Z","title":"libssh2 Heap Out-of-Bounds Read via publickey subsystem","severity":"HIGH","score":7.7,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00402,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66033","published":"2026-07-24T16:35:28.607Z","updated":"2026-07-28T01:06:25.504Z","title":"libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation","severity":"HIGH","score":8.7,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00583,"kevAdded":null,"exploit":false},{"id":"CVE-2026-66032","published":"2026-07-24T16:32:39.596Z","updated":"2026-07-28T01:06:24.681Z","title":"libssh2 Double-Free Heap Corruption via sftp_open()","severity":"HIGH","score":8.7,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-58051","published":"2026-06-28T01:32:54.283Z","updated":"2026-06-29T12:50:00.766Z","title":"libssh2 - Free of Uninitialized Pointer in publickey List Cleanup","severity":"HIGH","score":8.3,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00277,"kevAdded":null,"exploit":true},{"id":"CVE-2026-58050","published":"2026-06-28T01:32:53.582Z","updated":"2026-06-29T12:27:17.078Z","title":"libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation","severity":"HIGH","score":8.3,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2025-15661","published":"2026-06-18T20:18:29.475Z","updated":"2026-09-24T14:17:17.482Z","title":"libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c","severity":"HIGH","score":8.3,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00648,"kevAdded":null,"exploit":false},{"id":"CVE-2026-55200","published":"2026-06-17T19:03:15.183Z","updated":"2026-10-22T18:33:35.066Z","title":"libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c","severity":"CRITICAL","score":9.2,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.03877,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55199","published":"2026-06-17T18:44:18.048Z","updated":"2026-07-14T21:33:54.520Z","title":"libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler","severity":"HIGH","score":8.2,"vendor":"libssh2","product":"libssh2","kev":false,"epss":0.00918,"kevAdded":null,"exploit":false}]}