← Vulnerability feed

Vulnerability record · CVE-2026-7598 · published 1 May 2026

CVE-2026-7598: Libssh2 integer overflow vulnerability

LLibssh2 · Libssh2

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.

6.9 CVSS 4.0 Medium EPSS 0.82% · top 44.3% CWE-189 · CWE-189CWE-190 · Integer overflow
6.9CVSS 4.0 base score, v2 7.5
0.82%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
13References
1 Sep 2026Last modified by NVD

Description

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/libssh2/libssh2/ Product
https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1 Patch
https://github.com/libssh2/libssh2/pull/1858 Issue Tracking
https://vuldb.com/submit/805564 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/360555 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/360555/cti Permissions RequiredVDB Entry
https://access.redhat.com/errata/RHSA-2026:16736
https://access.redhat.com/errata/RHSA-2026:61752
https://access.redhat.com/errata/RHSA-2026:7021
https://access.redhat.com/security/cve/CVE-2026-7598
https://bugzilla.redhat.com/show_bug.cgi?id=2464597
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7598.json
https://vuldb.com/submit/805564 Third Party AdvisoryVDB Entry

Track CVE-2026-7598 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.2CVE-2026-55200Libssh2 vulnerabilitylibssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bo…EPSS 0.83%9.1CVE-2019-3860Libssh2 out-of-bounds read vulnerabilityAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compr…EPSS 5.1%9.1CVE-2019-3861Libssh2 out-of-bounds read vulnerabilityAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length a…EPSS 5.1%9.1CVE-2019-3858Libssh2 out-of-bounds read vulnerabilityAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker…EPSS 6.4%9.1CVE-2019-3859Libssh2 out-of-bounds read vulnerabilityAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote att…EPSS 6.3%9.1CVE-2019-3862Libssh2 out-of-bounds read vulnerabilityAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no paylo…EPSS 8.1%8.8CVE-2019-3856Libssh2 integer overflow vulnerabilityAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are …EPSS 6.1%8.8CVE-2019-3857Libssh2 integer overflow vulnerabilityAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets…EPSS 6.1%

Source: NIST National Vulnerability Database (record CVE-2026-7598), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.