SEC.co
Emergency

By weakness (CWE)

CWE-680: related vulnerabilities

CVEs classified under CWE-680. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-55200HIGH 8.1

    libssh2 versions up to 1.11.1 contain a flaw that allows attackers to send malformed SSH packets over the network. The vulnerability fails to properly validate the size field in incoming packets, allowing an attacker to write data beyond the allocated memory buffer. This memory corruption can be leveraged to execute arbitrary code on systems running vulnerable versions. No authentication is required; an attacker anywhere on the network can trigger this vulnerability.