CVE-2026-81535
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
CVSS score
6.3
EPSS probability
%0.3
Risk score
0.0
Published
9 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2025-14942
Improper authentication in Wolfssh
W
Patch status unknownEPSS %0
8.1
CVE-2025-15382
Out-of-bounds read in Wolfssh
W
Patch status unknownEPSS %0
7.4
CVE-2026-81020
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
7.4
CVE-2026-81019
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
7.7
CVE-2026-83540
wolfSSHd on Windows race condition leading to logon token reused across connections
W
Patch verifiedEPSS %0
6.9
CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
WI
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-81535"