CVE-2026-15370

Name of the Vulnerable Software and Affected Versions libssh (affected versions not specified)

Description A flaw exists in libssh during SFTP server directory listing. The longname field is constructed using unsafe concatenation into a fixed-size stack buffer. An attacker can trigger a stack buffer overflow by forcing the server to list filenames of sufficient length, which may result in server crashes or potential arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.