Known Vulnerabilities for products from WolfSSH
Listed below are 11 of the newest known vulnerabilities associated with the vendor "WolfSSH".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84897 json | src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KE... | Not Provided | 2026-10-07 | 2026-10-13 |
| CVE-2026-83742 json | Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platform... | Not Provided | 2026-10-07 | 2026-10-13 |
| CVE-2026-83540 json | Not Provided | 2026-10-07 | 2026-10-07 | |
| CVE-2026-81535 json | In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel op... | Not Provided | 2026-10-07 | 2026-10-13 |
| CVE-2026-16516 json | wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated dur... | Not Provided | 2026-10-07 | 2026-10-13 |
| CVE-2026-0930 json | Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user c... | Not Provided | 2026-04-20 | 2026-04-24 |
| CVE-2025-15382 json | A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker... | Not Provided | 2026-01-06 | 2026-10-13 |
| CVE-2025-14942 json | wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to s... | Not Provided | 2026-01-06 | 2026-10-07 |
| CVE-2025-11625 json | Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass an... | Not Provided | 2025-10-21 | 2026-10-19 |
| CVE-2025-11624 json | Potential stack buffer overwrite on the SFTP server side when receiving a malicious packet that has a handle size larger than... | Not Provided | 2025-10-21 | 2026-10-19 |
| CVE-2025-10966 json | Not Provided | 2025-11-07 | 2026-09-15 | |
| CVE-2022-32073 json | WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR. | 9.8 - CRITICAL | 2022-07-13 | 2022-07-26 |