CVE-2026-84897 | wolfSSL wolfSSH up to 1.5.0 Diffie-Hellman Group Exchange src/internal.c IsMessageAllowedServer input validation (EUVD-2026-94165)

October 7, 2026 Yanac

A vulnerability was found in wolfSSL wolfSSH up to 1.5.0 and classified as very critical. The impacted element is the function IsMessageAllowedServer of the file src/internal.c of the component Diffie-Hellman Group Exchange. The manipulation results in improper input validation.

This vulnerability is cataloged as CVE-2026-84897. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More