libssh
Security Risk Profile
28
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 74 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 30, 2012 to present
74
Total CVEs
14
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
28/100
low
🆕 1Fresh (<7d)📈 19 in Last 30 Days
Severity Distribution
Critical
2High
12Medium
39Low
16Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
6Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
10
2
Integer Overflow
5
3
Double Free
5
4
Buffer Overflow
4
5
Use After Free
2
Most Affected Products
1. libssh libssh142
2. redhat Enterprise Linux39
3. Fedoraproject Fedora23
4. Canonical Ubuntu Linux22
5. redhat/libssh14
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/197
unknown
libssh 0.12.1 and 0.11.5 security leases
7/21/2026🔧 No Patch
CVE-2026-15370
CVSS 6.7medium
Libssh: libssh: stack buffer overflow in sftp server longname construction
7/10/2026🔧 No Patch
REDHAT-BUG-2499049
CVSS 4.0medium
7/10/2026🔧 No Patch
CVE-2026-59845
CVSS 5.3medium
Libssh: libssh: denial of service via unchecked proxycommand fork() failure
7/8/2026🔧 No Patch
CVE-2026-59844
CVSS 6.5medium
Libssh: libssh: denial of service via oversized sftp read length
7/8/2026🔧 No Patch
REDHAT-BUG-2498177
CVSS 4.0medium
7/8/2026🔧 No Patch
REDHAT-BUG-2498179
CVSS 1.0low
7/8/2026🔧 No Patch
CVE-2026-59846
CVSS 3.9low
Libssh: libssh: information disclosure via proxycommand %r username expansion
7/8/2026🔧 No Patch
CVE-2026-59848
CVSS 5.3medium
Libssh: libssh: denial of service via sftp responses with unknown request ids
7/8/2026🔧 No Patch
REDHAT-BUG-2498180
CVSS 4.0medium
7/8/2026🔧 No Patch
Monitor libssh in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.