CVE-2026-10650 | warmcat libwebsockets up to 4.5.8 SSH Protocol sshd.c lws_ssh_parse_plaintext msg_len resource consumption

A vulnerability was found in warmcat libwebsockets up to 4.5.8. It has been declared as problematic. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consumption.

The identification of this vulnerability is CVE-2026-10650. The attack may be launched remotely. Furthermore, there is an exploit available.

A patch should be applied to remediate this issue.