Critical wolfSSL Flaw Could Allow Attackers to Spoof Trusted Hosts

A critical vulnerability (CVE-2026-5194, CVSS 9.3) in the wolfSSL TLS library allows certificate validation bypass because ECDSA verification does not enforce hash/digest size and OID checks when used with EdDSA or ML-DSA, potentially enabling attackers to impersonate hosts, spoof data, and gain unauthorized privileges; developers should audit and update affected wolfSSL deployments.