CVE-2026-55200 libpwn_cve_2026_55200_server.py Malicious SSH Scaffold Execution

Ethan Andrews@eandrews

•updated Jun 28, 2026•2•0•3

Detects the execution of the libpwn_cve_2026_55200_server.py Python script, which is identified as a malicious SSH scaffold targeting CVE-2026-55200. This script facilitates exploitation of libssh2 clients by binding to a specific port and delivering malformed packets during the pre-authentication phase.