wolfSSL · product
wolfSSH
10 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.
- User authentication bypass in wolfSSH server
- wolfSSHd on Windows race condition leading to logon token reused across connections
- wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role c…
- wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
- Host verification bypass and credential leak
- Authentication Bypass
- Client SCP Request Triggers Buffer Overread by 1 Byte
- wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
- wolfSSH ECDSA host key curve not validated against negotiated algorithm
- Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.