CVE-2026-83540: wolfSSH 1.4.15 through 1.5.0; status changes: 1.6.0 — unaffected

Affected technology

wolfSSH · 1.4.15 through 1.5.0; status changes: 1.6.0 — unaffected
wolfSSL

Component: wolfSSHd
Function: SetupUserTokenWin, CheckPasswordWIN
File: apps/wolfsshd/auth.c

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A less privileged user with a valid account on the server can exploit this to force a login as a more privileged user. Vendor/CNA’s CVSS 4.0 assessment (base score 7.7/10) rates confidentiality, integrity and availability impact as high.