Known Vulnerabilities for WolfSSH by WolfSSL Inc.
Listed below are 6 of the newest known vulnerabilities associated with "WolfSSH" by "WolfSSL Inc.".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84897 json | src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KE... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-83742 json | Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platform... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-83540 json | When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for on... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-81535 json | In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel op... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-16516 json | wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated dur... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2025-10966 json | curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host veri... | Not Provided | 2025-11-07 | 2026-09-15 |