Public PoC Shows libssh2 Flaw Lets SSH Servers Execute Code on Clients
A public proof-of-concept for CVE-2026-55200 has landed on GitHub. The libssh2 vulnerability lets a malicious SSH server corrupt client memory and achieve remote code execution without any credentials or user interaction. All libssh2 releases up to 1.11.1 are affected, forcing an urgent update.