Skip to content
OpenAdvisories

Product · wolfSSL

wolfSSH

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-16516

    wolfSSH ECDSA host key curve not validated against negotiated algorithm

    wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In ParseECCPubKey() (src/internal.c), the blob's algorithm string is used to derive the curve via NameToId/wcPrimeFo…

    wolfSSL wolfSSH wolfssh Alpine
  • Critical 9.4
    CVE-2025-14942

    Authentication Bypass

    wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to send a bogus signature, or trick the client into skipping user authentication. This affects client applications with wolfSSH version 1.4.21…

    wolfSSL wolfSSH
  • Critical 9.4
    CVE-2025-11625

    Host verification bypass and credential leak

    Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.

    wolfSSL wolfSSH
  • Critical 9.1
    CVE-2024-2873

    User authentication bypass in wolfSSH server

    A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.

    wolfSSL wolfSSH