https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:48:36.201356+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08612 bdu:2026-08612 2026-10-03T06:48:36.427250+00:00 bdu:2026-08612 https://cve.radiocsirt.org/vuln/bell-cve-2026-55200 BELL-CVE-2026-55200 2026-10-03T06:48:36.427288+00:00

Affected: Alpaquita:23: libssh2, Alpaquita:25: libssh2, Alpaquita:stream: libssh2, Alpaquita:stream: rust

 https://cve.radiocsirt.org/vuln/brew-libssh2-cve-2026-55200 BREW-libssh2-CVE-2026-55200 — libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 2026-10-03T06:48:36.427322+00:00

Affected: Homebrew: libssh2

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0812 certfr-2026-avi-0812 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-03T06:48:36.427348+00:00 certfr-2026-avi-0812 https://cve.radiocsirt.org/vuln/euvd-2026-336904 EUVD-2026-336904 2026-10-03T06:48:36.427365+00:00 EUVD-2026-336904 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55200 fkie_cve-2026-55200 2026-10-03T06:48:36.427376+00:00

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-r8mh-x5qv-7gg2 GHSA-r8mh-x5qv-7gg2 2026-10-03T06:48:36.427397+00:00

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-55200 msrc_CVE-2026-55200 — libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 2026-10-03T06:48:36.427412+00:00 msrc_CVE-2026-55200 https://cve.radiocsirt.org/vuln/ncsc-2026-0210 NCSC-2026-0210 — Kwetsbaarheden verholpen in libssh2 door libssh 2026-10-03T06:48:36.427428+00:00 NCSC-2026-0210 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11109-1 openSUSE-SU-2026:11109-1 — libssh2-1-1.11.1-3.1 on GA media 2026-10-03T06:48:36.427445+00:00

libssh2-1-1.11.1-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:29950 RHSA-2026:29950 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T06:48:36.427461+00:00

libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO message libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

 https://cve.radiocsirt.org/vuln/suse-su-2026:22284-1 SUSE-SU-2026:22284-1 — Security update for libssh2_org 2026-10-03T06:48:36.427478+00:00

Security update for libssh2_org

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55200 UBUNTU-CVE-2026-55200 2026-10-03T06:48:36.427493+00:00

Affected: Ubuntu:25.10: libssh2, Ubuntu:26.04:LTS: libssh2

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1996 WID-SEC-W-2026-1996 — libssh2: Mehrere Schwachstellen 2026-10-03T06:48:36.427514+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libssh2 ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code auszuführen.