What’s Vulnerable › Vulnerabilities

CVE-2018-9853

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-10 · updated 2026-06-17
• Weakness: CWE-269

Description

Insecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of the freesshd.exe process by leveraging the ability to login to an unprivileged account on the server.

Affected products

• freeSSHd: 1.3.1

References

• https://medium.com/%40TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a
• https://medium.com/%40TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a

Get alerted when CVE-2018-9853 or the next vulnerability affects your stack