CVE-2020-37166: Celestialsoftware Absolutetelnet

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate.

Affected products

• Celestialsoftware Absolutetelnet: version 11.12 only

Published 2026-02-07. Last modified 2026-06-17.