CVE-2026-3731
Microsoft · Published March 20, 2026
5.3
CVSS v3.1
MEDIUMPatch availableGet patch
Description
libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds. libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds
Affected Products
- azl3 libssh 0.10.6-6 on Azure Linux 3.0
- cbl2 libssh 0.10.6-5 on CBL Mariner 2.0
- azl3 libssh 0.10.6-5 on Azure Linux 3.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C