CVE-2026-0930

MediumCVSS 4.3

Published: 20/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

Potential out-of-bounds read in wolfSSHd on Windows when handling a terminal resize request. An authenticated user could trigger the out-of-bounds read after establishing a connection, leaking adjacent stack memory to the pseudo-console output.

Risk Assessment

An authenticated attacker can leak stack memory contents, potentially exposing sensitive information such as session data or other secrets.

Recommendation

Update wolfSSHd to a patched version. Restrict access to the SSH service and monitor for unusual terminal resize requests.

Other vulnerabilities in wolfSSHd

CVE-2026-83540High
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged user with a valid account on the server can exploit this to force a login as a more privileged user.

Original NVD description (English source)

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS