How many wolfssl wolfssh CVEs are in CISA KEV?

None of wolfssl wolfssh's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wolfssl wolfssh are affected?

59 distinct wolfssl wolfssh versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wolfssl wolfssh CVEs?

wolfssl wolfssh's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-126 (Buffer Over-read), CWE-190 (Integer Overflow or Wraparound), CWE-191 (Integer Underflow (Wrap or Wraparound)).

How many critical wolfssl wolfssh vulnerabilities are there?

wolfssl wolfssh has 5 critical and 1 high-severity CVEs.

What is the average severity of wolfssl wolfssh CVEs?

The average CVSS base score across wolfssl wolfssh's scored CVEs is 6.8.

RadicalNotion.AI

Log in Create an account

wolfssl

12 CVEs

wolfssl wolfssh Vulnerabilities

Name: wolfssl wolfssh vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wolfssh by wolfssl.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.8

Avg CVSS

2022–2026

Last updated October 7, 2026

Overview

wolfssl wolfssh has 12 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.8. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of wolfssl wolfssh's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High1

Medium4

Low2

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wolfssl wolfssh's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No wolfssl wolfssh CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every wolfssl wolfssh version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.4.15-stable11 CVEs
1.4.1611 CVEs
1.4.12-stable10 CVEs
1.4.13-stable10 CVEs
1.4.14-stable10 CVEs
1.4.17-stable10 CVEs
1.4.18-stable10 CVEs
1.4.19-stable10 CVEs
1.4.20-stable10 CVEs
1.3.0-stable9 CVEs
1.4.0-stable9 CVEs
1.4.11-stable9 CVEs
1.4.2-stable9 CVEs
1.4.3-stable9 CVEs
1.4.4-stable9 CVEs
1.4.5-stable9 CVEs
1.4.6-stable9 CVEs
1.4.7-stable9 CVEs
1.2.0-stable8 CVEs
1.2.28 CVEs
1.4.10-stable8 CVEs
1.4.21-stable8 CVEs
1.4.8-stable8 CVEs
1.4.98 CVEs
0.17 CVEs
0.2.07 CVEs
1.0.0-RC17 CVEs
1.0.0-RC27 CVEs
1.1.0-stable7 CVEs
1.4.22-stable5 CVEs
1.5.0-stable1 CVE

Version ranges

>= 1.6.05 CVEs
< 1.4.221 CVE
<= 1.5.01 CVE
<= v1.4.161 CVE
>= 1.4.20;01 CVE
1.2.0 <= v <= 1.5.01 CVE
1.4.11 <= v <= 1.5.01 CVE
1.4.12 <= v < 1.4.211 CVE
1.4.15 <= v < 1.5.01 CVE
1.4.15 <= v <= 1.5.01 CVE
1.4.8 <= v <= 1.5.01 CVE

Fixed in

1.6.05 CVEs
8643d7be841184f766374e3b0ed68ced6391543c5 CVEs
7d4829843625eb7f59216136a9f21e1f986a8c2e3 CVEs
1.4.211 CVE
1.4.221 CVE
1.5.01 CVE
31d13697a608fa1bf9eec11aa6eff1503ade836f1 CVE
513e52b18927a4e3f7cf17ecaf107958e56139de1 CVE
616eb681e70759c30c3ba158f2b18d7bd954def81 CVE
79a7f299337a28aa561409688a268d0efe6e295c1 CVE
822e4464560b467580ea37a2fc03b0988d88b71f1 CVE
9204ae711999facc7a6a386e1306ae5fb1506da5

Find a version

12 CVEs

Sort

wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
CVE-2026-84897
Patch
Workaround
CWE-372
Medium · CVSS 6.9
EPSS 0.3% (21th pct)2026-10-07
wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
CVE-2026-83742
Patch
CWE-191
Medium · CVSS 5.3
EPSS 0.4% (32th pct)2026-10-07
wolfSSHd on Windows race condition leading to logon token reused across connections
CVE-2026-83540
Patch
Workaround
CWE-287
High · CVSS 7.7
EPSS 0.4% (29th pct)2026-10-07
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
CVE-2026-81535
Patch
CWE-862
Medium · CVSS 6.3
EPSS 0.3% (18th pct)2026-10-07
wolfSSH ECDSA host key curve not validated against negotiated algorithm
CVE-2026-16516
Patch
CWE-345
Critical · CVSS 9.0
EPSS 0.1% (2th pct)2026-10-07
Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize
CVE-2026-0930
Patch
CWE-126
Low · CVSS 2.3
EPSS 0.2% (6th pct)2026-04-20
Client SCP Request Triggers Buffer Overread by 1 Byte
CVE-2025-15382
Patch
CWE-125
Medium · CVSS 5.1
EPSS 0.4% (27th pct)2026-01-06
Authentication Bypass
CVE-2025-14942
Patch
CWE-287
Critical · CVSS 9.4
EPSS 0.4% (32th pct)2026-01-06
Host verification bypass and credential leak
CVE-2025-11625
Patch
CWE-287
Critical · CVSS 9.4
EPSS 0.4% (36th pct)2025-10-21
Buffer overwrite when processing file handles with the SFTP server
CVE-2025-11624
Patch
CWE-787
Low · CVSS 1.8
EPSS 0.4% (29th pct)2025-10-21
Critical vulnerability · 2024-03-25
CVE-2024-2873
Patch
CWE-287
Critical · CVSS 9.1
EPSS 0.6% (49th pct)2024-03-25
Critical vulnerability · 2022-07-13
CVE-2022-32073
Patch
CWE-190
Critical · CVSS 9.8
EPSS 1.9% (79th pct)2022-07-13

Common weakness types

The CWE weakness categories most often found in wolfssl wolfssh CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wolfssl wolfssh CVEs were published each year.

2022

1

2024

1

2025

2

2026

8

Other wolfssl products

Browse vulnerabilities for other products by wolfssl.

wolfssl155 CVEs wolfmqtt7 CVEs wolfcrypt4 CVEs wolfengine2 CVEs wolfprovider1 CVEs wolfssl-py1 CVEs wolfSSL (wolfCrypt)1 CVEs wolfTPM1 CVEs

All wolfssl vulnerabilities

Frequently asked questions

Common questions about wolfssl wolfssh vulnerabilities.

How many CVEs does wolfssl wolfssh have?: wolfssl wolfssh has 12 published CVE records since 2022.
How many wolfssl wolfssh CVEs are in CISA KEV?: None of wolfssl wolfssh's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wolfssl wolfssh vulnerabilities?: No wolfssl wolfssh CVEs currently have a tracked public exploit in this dataset.
Which versions of wolfssl wolfssh are affected?: 59 distinct wolfssl wolfssh versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wolfssl wolfssh CVEs?: wolfssl wolfssh's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-126 (Buffer Over-read), CWE-190 (Integer Overflow or Wraparound), CWE-191 (Integer Underflow (Wrap or Wraparound)).
How many critical wolfssl wolfssh vulnerabilities are there?: wolfssl wolfssh has 5 critical and 1 high-severity CVEs.
What is the average severity of wolfssl wolfssh CVEs?: The average CVSS base score across wolfssl wolfssh's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wolfssl wolfssh vulnerabilities

Get an alert for each new wolfssl wolfssh CVE, with AI-written analysis and remediation steps.

Create an account See pricing

1 CVE

9777bc5ce810d6c418a1473e9e8c40cdb0026e5a1 CVE

a472f1ee2b653f623d85ef2297321733f1dbfd221 CVE

b6bd975ccfac6aadf29b98e35e09114bef3840a91 CVE

e396a0a4b6b367f10270287446a4be0071742b5c1 CVE

fbc7cd88a23b59a45a584020a4c7242d9bd70f351 CVE