Post

wolfSSL Embedded SSL/TLS; FIPS 140-3

Vulnerability Disclosure: wolfSSH (CVE-2026-16516)

dlvr.itVulnerability Disclosure: wolfSSH (CVE-2026-16516)Date: October 6, 2026 Severity: Critical Affected Users: Applications using the wolfSSH client with wolfSSH releases through v1.5.0 that rely on ECDSA host keys. Fixed In: wolfSSH v1.6.0 (PR 1022, issue #1012) Summary A man-in-the-middle could substitute a server’s ECDSA host key with a key on a different curve and still pass signature verification, using […]

27/10/26, 6:02 pm0 reposts0 likes

No replies yet.