CVE-2026-84897中 5.3src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP …
CVE-2026-83742高 8.8Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an aut…
CVE-2026-83540高 8.8When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated…
CVE-2026-81535緊急 9.1In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwardin…
CVE-2026-16516高 7.4wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchang…