CVE-2026-66034 | libssh2 up to 1.11.1 publickey subsystem libssh2_publickey_list_fetch out-of-bounds

July 24, 2026 Yanac

A vulnerability, which was classified as critical, has been found in libssh2 up to 1.11.1. This impacts the function libssh2_publickey_list_fetch of the component publickey subsystem. The manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-66034. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More