CVE-2026-55200 libssh2 RCE PoC Harness Artifacts on Disk or Executed

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•0

This rule detects the creation, execution, or presence of specific file names and command-line arguments associated with local RCE research, proof-of-concept exploits, and server-side harnesses, specifically identifying artifacts prefixed with 'libpwn_'.