CVE-2026-55200

The repository provides a detailed technical analysis of CVE-2026-55200, a heap-based buffer overflow vulnerability in libssh2 versions up to 1.11.1, allowing RCE and DoS attacks. It includes mitigation steps, impact analysis, and references to official sources but lacks functional exploit code.

The repository contains a functional PoC exploit for CVE-2026-55200, demonstrating an out-of-bounds write vulnerability in libssh2 <= 1.11.1 via a crafted SSH packet with an oversized packet_length field. The exploit sets up a malicious SSH server that triggers heap corruption during packet processing, potentially leading to RCE or DoS.

This repository contains a technical writeup describing an out-of-bounds write vulnerability in libssh2's ssh2_transport_read() function, where unchecked packet_length values can lead to heap corruption and remote code execution. The writeup references an external PoC but does not include exploit code itself.

The repository contains a functional PoC for CVE-2026-55200, an out-of-bounds write vulnerability in libssh2 <= 1.11.1. The exploit demonstrates the vulnerability by sending a maliciously crafted SSH packet with an oversized length field, leading to heap corruption and potential RCE.