CVE-2018-10933
CRITICALEPSS Exploitation Probability
EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.
Description
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
LibSSH 0.7.6 / 0.8.4 - Unauthorized Access
by jas502n · Oct 20, 2018
libSSH - Authentication Bypass
by Dayanç Soyadlı · Oct 18, 2018
Frequently Asked Questions
Is CVE-2018-10933 in your stack?
O3 detects CVE-2018-10933 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.