Cve-2026-55200

libssh2 Unchecked SSH packet_length Integer Wrap to RCE (CVE-2026-55200)

CVE-2026-55200 is an unchecked packetlength condition in libssh2's ssh2transportread() transport-parsing path. The vulnerable code accepts an attacker-controlled decrypted SSH packetlength field and only rejects values less than 1, then computes an allocation…