Vulnerabilities

TI-2026-71766 CVE-2026-54697

Integer overflow in ConnectBot SSH DER private-key parsing

LOW 28

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00125 Published 2026-10-13 Fixed in 0.3.1 CWE-190

TI-2026-71767 CVE-2026-54700

ConnectBot SSH library allows excessive memory allocation

LOW 37

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.0037 Published 2026-10-13 Fixed in 0.3.1 CWE-20

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354

Vulnerabilities

Filters

Integer overflow in ConnectBot SSH DER private-key parsing

ConnectBot SSH library allows excessive memory allocation

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…