W
Vendor security profile
wolfssh
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical2
CISA KEV0
Public exploit0
Patch rate%71
Avg. CVSS7.6
12-month vulnerability rate
0
0
2
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
7toplam CVE
Critical2 (29%)
High2 (29%)
Medium3 (43%)
Patch and exploitation view
%71
Verified patch
%0
CISA KEV
%0
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.9
CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
WI
Patch verifiedEPSS %0
5.3
CVE-2026-83742
wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
WI
Patch verifiedEPSS %0
7.7
CVE-2026-83540
wolfSSHd on Windows race condition leading to logon token reused across connections
W
Patch verifiedEPSS %0
6.3
CVE-2026-81535
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
WI
Patch verifiedEPSS %0
9.0
CVE-2026-16516
wolfSSH ECDSA host key curve not validated against negotiated algorithm
WI
Patch verifiedEPSS %0
8.1
CVE-2025-15382
Out-of-bounds read in Wolfssh
W
Patch status unknownEPSS %0
9.8
CVE-2025-14942
Improper authentication in Wolfssh
W
Patch status unknownEPSS %0