libssh2 libssh2

Name: libssh2 libssh2
Brand: libssh2

productUS

cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical10high4medium0low

updated 2026-10-27

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	1.11.1	2023-12-18	< 1.11.1
CVE-2019-13115US	high8.1	11.7% (96th)	Exploit	1.9.0	2019-07-16	< 1.9.0
CVE-2026-55200US	high8.3	3.88% (90th)	Exploit	no fix	2026-06-17	= 1.11.1
CVE-2019-17498US	high8.1	3.81% (90th)	Exploit	no fix	2019-10-21	≤ 1.9.0
CVE-2019-3855US	high8.8	9.29% (95th)	—	1.8.1	2019-03-21	< 1.8.1
CVE-2019-3862US	critical9.1	7.90% (95th)	—	1.8.1	2019-03-21	< 1.8.1
CVE-2019-3858US	critical9.1	6.45% (94th)	—	1.8.1	2019-03-21	< 1.8.1
CVE-2019-3859US	critical9.1	6.28% (94th)	—	1.8.1	2019-03-21	< 1.8.1
CVE-2019-3857US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	1.2.8 → 1.8.0
CVE-2019-3856US	high8.8	6.13% (93rd)	—	1.8.1	2019-03-25	< 1.8.1
CVE-2019-3860US	critical9.1	5.42% (93rd)	—	no fix	2019-03-25	0.3 → 1.8.0
CVE-2019-3861US	critical9.1	5.12% (92nd)	—	no fix	2019-03-25	0.15 → 1.8.0
CVE-2015-1782US	medium6.8	3.50% (89th)	—	no fix	2015-03-13	≤ 1.4.3
CVE-2019-3863US	high8.8	3.44% (89th)	—	1.8.1	2019-03-25	< 1.8.1
CVE-2016-0787US	medium5.9	2.59% (85th)	—	no fix	2016-04-13	≤ 1.6.0
CVE-2020-22218US	high7.5	1.16% (67th)	—	no fix	2023-08-22	= 1.10.0
CVE-2026-55199US	high7.5	0.92% (60th)	—	no fix	2026-06-17	≤ 1.11.1
CVE-2025-15661US	medium6.5	0.65% (51st)	—	no fix	2026-06-18	≤ 1.11.1
CVE-2026-66033US	—	0.58% (48th)	—	no fix	2026-07-24	≤ 1.11.1
CVE-2026-66035US	—	0.47% (41st)	—	no fix	2026-07-24	≤ 1.11.1
CVE-2026-7598US	—	0.47% (40th)	—	no fix	2026-05-01	≤ 1.11.1
CVE-2026-66032US	—	0.45% (39th)	—	no fix	2026-07-24	≤ 1.11.1
CVE-2026-58050US	high7.5	0.44% (38th)	—	no fix	2026-06-28	≤ 1.11.1
CVE-2026-66034US	—	0.40% (34th)	—	no fix	2026-07-24	≤ 1.11.1
CVE-2026-58051US	—	0.28% (20th)	—	no fix	2026-06-28	≤ 1.11.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read10 CVEs
CWE-190Integer Overflow or Wraparound8 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency6 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-908Use of Uninitialized Resource2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-189CWE-1891 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan