wolfSSH — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in wolfSSH, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-84897	wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion CWE-372	6.9	Medium	2026-10-07
CVE-2026-83742	wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms CWE-191	5.3	Medium	2026-10-07
CVE-2026-83540	wolfSSHd on Windows race condition leading to logon token reused across connections CWE-287	7.7	High	2026-10-07
CVE-2026-81535	wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check CWE-862	6.3	Medium	2026-10-07
CVE-2026-16516	wolfSSH ECDSA host key curve not validated against negotiated algorithm CWE-345	9.0	Critical	2026-10-07
CVE-2026-0930	Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize CWE-126	8.1^AI	High ^AI	2026-04-20
CVE-2025-15382	Client SCP Request Triggers Buffer Overread by 1 Byte CWE-125	8.1	-	2026-01-06
CVE-2025-14942	Authentication Bypass CWE-287	9.8	-	2026-01-06
CVE-2025-11625	Host verification bypass and credential leak CWE-287	9.8^AI	Critical ^AI	2025-10-21
CVE-2025-11624	Buffer overwrite when processing file handles with the SFTP server CWE-787	9.8^AI	Critical ^AI	2025-10-21
CVE-2024-2873	User authentication bypass in wolfSSH server CWE-287	9.1	Critical	2024-03-25

All 11 known CVE vulnerabilities affecting wolfSSH with full Chinese analysis, references, and POCs where available.