Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

A public proof-of-concept has been released for a critical vulnerability in libssh2, identified as CVE-2026-55200. This flaw allows a malicious SSH server to cause memory corruption on a connecting client, potentially leading to code execution. The vulnerability can be exploited without requiring credentials or user interaction. The bug affects libssh2 releases up to and including version 1.11.1 and has a high CVSS score of 9.2. libssh2 is used as a client-side SSH library, distinguishing it from server-side implementations. The vulnerability's impact is significant due to its potential for code execution.