CVE-2026-55200 libssh2 RCE Exploit Harness Binaries Detected on Host

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•2

Detects the execution or presence of identified exploit harness binaries and scripts associated with CVE-2026-55200, an RCE vulnerability in libssh2. The rule monitors process launches for specific filenames and command-line arguments indicative of proof-of-concept or exploitation tooling from the 'exploitarium' repository.