Search: CVE-2026-66033

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2026-66033libssh2 through 1.11.1, fixed High7.5EPSS 0.6%2026-07-24GCVE DatabaseCVE-2026-66033 libssh2 versions up to 1.11.1 contain a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function related to AES-GCM cipher negotiation. This flaw allows a malicious SSH server to cause a denial of service by crashing any connecting client before authentication. The issue is fixed in versions 1.11.0-4.1ubuntu0.24.04.4 and 1.11.1-1ubuntu0.26.04.4. EPSS 0.6%Vulnerability	GCVE Database	2026-07-24

Page 1 of 1