SECURITYJun 29 · 07:06 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

A public proof-of-concept has been released for CVE-2026-55200, a critical vulnerability in the libssh2 client-side SSH library. The flaw allows a malicious or compromised SSH server to trigger memory corruption and potential code execution on a client without requiring credentials or user interaction, affecting all versions up to 1.11.1 with a CVSS 4.0 score of 9.2.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

CVE-2026-55200topiclibssh2organizationSSHtopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 12 · 16:44 UTC
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
SECURITYJun 13 · 13:23 UTC
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
SECURITYMay 19 · 14:56 UTC
DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability
SECURITYMay 21 · 03:44 UTC
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks