PatchTheCVElibssh2 vulnerabilities
Recent CVEs affecting libssh2 products. 1 tracked.
libssh2 has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-06-17. Highest priority: CVE-2026-55200 (score 61/100).
- CVE-2026-55200 HIGH 8.1 DOWNGRADE libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read(
FAQ
How do I fix libssh2 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libssh2 being exploited right now?
None of the tracked libssh2 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libssh2 CVE should I patch first?
CVE-2026-55200 currently ranks highest (61/100): libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read(.