CVE-2026-0930

CVE-2026-0930 is an out-of-bounds read vulnerability in wolfSSHd on Windows that occurs during terminal resize request handling. An authenticated user can trigger this flaw after establishing an SSH connection, resulting in the disclosure of adjacent stack memory through the pseudo-console output. The vulnerability affects wolfSSH implementations on Windows systems and requires prior authentication to exploit. The attack vector is network-based with low complexity, though the CVSS score is not currently available. Exploitation is not known to be active in the wild, with no public exploit code identified, and the vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog. Community attention remains minimal, as reflected by the low EPSS score of 0.0004 and moderate FAUCET risk score of 32.0, indicating this is a lower-priority security issue requiring standard patch management practices.