CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue.

• CWE-189
• CWE-190
• CWE-190

• https://github.com/libssh2/libssh2/Product
• https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1Patch
• https://github.com/libssh2/libssh2/pull/1858Issue Tracking
• https://vuldb.com/submit/805564Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360555Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360555/ctiPermissions Required, VDB Entry
• https://access.redhat.com/errata/RHSA-2026:16736
• https://access.redhat.com/errata/RHSA-2026:7021
• https://access.redhat.com/security/cve/CVE-2026-7598
• https://bugzilla.redhat.com/show_bug.cgi?id=2464597
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7598.json
• https://vuldb.com/submit/805564Third Party Advisory, VDB Entry

Published

May 1, 2026

Last Modified

Jul 15, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7592A weakness has been identified in itsourcecode Courier Manag…7.3
• CVE-2026-7593A security vulnerability has been detected in Sunwood-ai-lab…7.3
• CVE-2026-7594A vulnerability was detected in Flux159 mcp-game-asset-gen 0…7.3
• CVE-2026-7595A flaw has been found in nextlevelbuilder ui-ux-pro-max-skil…6.3
• CVE-2026-7596A vulnerability has been found in nextlevelbuilder ui-ux-pro…4.3
• CVE-2026-7597A vulnerability was found in mem0ai mem0 up to 1.0.11. This …6.3
• CVE-2026-7599A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. Thi…6.3
• CVE-2026-7600A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. Thi…6.3
• CVE-2026-7601A vulnerability has been found in Open5GS up to 2.7.6. Affec…5.3
• CVE-2026-7602A vulnerability was found in JeecgBoot up to 3.9.1. Affected…6.3
• CVE-2026-7603A vulnerability was determined in JeecgBoot up to 3.9.1. Aff…6.3
• CVE-2026-7604A vulnerability was identified in JeecgBoot up to 3.9.1. Thi…6.3