Back to the CVE list

CVE-2026-5917

libgit2 Shell Command Injection via ssh_libssh2 Backend

CVSS score

8.6

EPSS probability

%1.4

Risk score

0.1

Published

2 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

7.5

CVE-2026-53587libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data

Vendorlibgit2 Productlibgit2

Patch status unknownEPSS %02 mo ago

5.3

CVE-2026-53585libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header

Vendorlibgit2 Productlibgit2

Patch status unknownEPSS %02 mo ago

6.5

CVE-2026-53586libgit2: HTTP transport can leak credentials to an offsite redirect target

Vendorlibgit2 Productlibgit2

Patch status unknownEPSS %02 mo ago

6.5

CVE-2026-53583libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

Vendorlibgit2 Productlibgit2

Patch status unknownEPSS %02 mo ago

4.3

CVE-2026-53584libgit2: Submodule path traversal

Vendorlibgit2 Productlibgit2

Patch status unknownEPSS %02 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-5917"