Reported by 2 outlets
Critical industrial firmware vulnerabilities including CVE-2026-27565 authentication bypass
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.02 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.1 / 10 = base × recency + community
Analysis
wolfSSH version 1.6.0, released October 6, 2026, fixes five security vulnerabilities including CVE-2026-16516, a critical ECDSA host-key validation issue affecting versions up to 1.5.0. The flaw allows a man-in-the-middle attacker to bypass SSH host-key authentication under certain deployment conditions. The advisory was added to the existing industrial firmware vulnerability story, which also covers CVE-2026-27565 and related authentication bypass issues in Pepperl+Fuchs, Phoenix Contact, and related industrial devices.
This is an SSH authentication bypass in a widely used embedded TLS/SSH library, meaning embedded devices, industrial controllers, and any product using wolfSSH 1.5.0 or earlier should upgrade immediately. The critical rating reflects root-level authentication failure rather than information disclosure. Confirm which embedded products in your environment link wolfSSH and schedule updates.
Timeline
-
original reporting
Patch critical industrial firmware vulnerabilities and authentication bypass flaws like CVE-2026-27565 in Pepperl+Fuchs, Phoenix Contact & C
securityonline.info · 27d ago · September 16th, 2026
Patch critical industrial firmware vulnerabilities and authentication bypass flaws like CVE-2026-27565 in Pepperl+Fuchs, Phoenix Contact & C
via Mastodon https://securityonline.info/industrial-firmware-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
-
update from gbhackers.com
wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass
gbhackers.com · 5d ago · October 8th, 2026
wolfSSL has released wolfSSH version 1.6.0, which addresses five security vulnerabilities, including a critical flaw that could allow a man-in-the-middle attacker to bypass SSH host-key authentication under certain deployment conditions. The release, dated October 6, 2026, fixes CVE-2026-16516, a critical ECDSA host-key validation issue affecting wolfSSH up to version 1.5.0. Additionally, it resolves a high-severity […] The post wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .