CVE-2026-16516 wolfSSH - Man-in-the-Middle

wolfSSH contains a man-in-the-middle vulnerability caused by improper validation of ECDSA curve identifiers in KEXDH_REPLY host key blobs, letting active network attackers bypass signature verification, exploit requires active MitM and lax public key checks.