thc-hydra vulnerabilities

1 known vulnerability in thc-hydra from Vanhauser-thc. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  thc-hydra: Stack-based Buffer Overflow

  CVE-2026-56766Jun 25, 2026Vanhauser-thcEPSS 2.44%

  Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a