Wolfssl Wolfssh vulnerabilities

• wolfssh wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion CVE-2026-84897 Fix available 6.9 MediumOctober 7, 2026
• wolfssh wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms CVE-2026-83742 Fix available 5.3 MediumOctober 7, 2026
• wolfssh wolfSSHd on Windows race condition leading to logon token reused across connections CVE-2026-83540 Fix available 7.7 HighOctober 7, 2026
• wolfssh wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check CVE-2026-81535 Fix available 6.3 MediumOctober 7, 2026
• wolfssh wolfSSH ECDSA host key curve not validated against negotiated algorithm CVE-2026-16516 Fix available 9.0 CriticalOctober 7, 2026
• wolfssh Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize CVE-2026-0930 2.3 LowApril 20, 2026
• wolfssh Client SCP Request Triggers Buffer Overread by 1 Byte CVE-2025-15382 5.1 MediumJanuary 6, 2026
• wolfssh Authentication Bypass CVE-2025-14942 9.4 CriticalJanuary 6, 2026
• wolfssh Host verification bypass and credential leak CVE-2025-11625 9.4 CriticalOctober 21, 2025
• wolfssh Buffer overwrite when processing file handles with the SFTP server CVE-2025-11624 1.8 LowOctober 21, 2025
• wolfssh User authentication bypass in wolfSSH server CVE-2024-2873 9.1 CriticalMarch 25, 2024