Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-29 07:06 UTC
Importiert: 2026-07-03 15:41 UTC
CVSS: 9.2
Quelle-ID: thn_global
uid_hash: e8db571b682da523787387fd7a6d703fc8b8b7948b818b759e617f05e9610ef9

The Hacker News

Inhalt

A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible code execution. No credentials, no user interaction. The bug affects every release up to and including 1.11.1 and carries a CVSS 4.0 score of 9.2.

libssh2 is a client-side SSH library, not a server.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-55200	CRITICAL	9.2	CRITICAL	9.2			2026-06-17

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste