WWolfSSL

Products

Exploited and recent CVEs

• CVE-2026-83540 High 7.7 wolfSSHd on Windows race condition leading to logon token reused across connections 0.6%
• CVE-2026-15442 Low 2.3 Heap use-after-free on read during bidirectional (D)TLS shutdown 0.2%
• CVE-2026-89102 High 8.3 OCSP stapling v2 multi accepts non-CA chain certificates as issuers 0.1%
• CVE-2026-89133 Medium 6.3 NameConstraints not enforced across unconstrained intermediate CA 0.1%
• CVE-2026-89134 Medium 6.3 Subject CN name-constraint check bypassed when non-DNS SAN present 0.2%
• CVE-2026-89135 Medium 6.3 Failed X509_verify_cert leaves unverified CA in shared CertManager 0.1%
• CVE-2026-89136 High 8.3 Client accepts unsolicited RawPublicKey server certificate type 0.4%
• CVE-2026-93302 High 8.3 Trusted peer certificate match ignores public key, allowing forged CA clones 0.2%
• CVE-2026-93304 Medium 6.3 (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange 0.2%
• CVE-2026-94417 Low 2.3 CRL check skipped when OCSP enabled and certificate has no OCSP URL 0.2%
• CVE-2026-94418 Low 2.3 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY 0.1%
• CVE-2026-94419 Low 2.3 Client session cache reference poisoning allows resumption with wrong server 0.1%
• CVE-2026-7511 Medium 5.9 PKCS7_verify signer confusion allows forged signatures to be accepted 0.3%
• CVE-2026-7532 Medium 5.7 iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined 0.3%
• CVE-2026-8720 Medium 5.9 HMAC-BLAKE2 final discards message when key length exceeds block size 0.2%
• CVE-2026-10098 Medium 6.3 OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status 0.2%
• CVE-2026-11703 Medium 6.0 Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption 0.4%
• CVE-2026-55962 Medium 6.0 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify 0.2%
• CVE-2026-6092 Low 2.1 Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured 0.4%
• CVE-2026-6325 Low 2.0 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list 0.3%
• CVE-2026-6329 Medium 6.0 PKCS#12 MAC verification uses attacker-controlled comparison length 0.2%
• CVE-2026-6330 Medium 6.3 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input 0.2%
• CVE-2026-6331 Low 2.1 HMAC zero-length tag forgery in EVP_DigestVerifyFinal 0.2%
• CVE-2026-6412 Low 2.3 Continued acceptance of SHA-1/MD5 digests in certificate processing 0.1%
• CVE-2026-6450 Low 1.0 CRL critical extension bypass in ParseCRL_Extensions 0.3%
• CVE-2026-6678 Low 1.0 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info 0.3%
• CVE-2026-6679 High 8.8 DTLS 1.3 ACK serialization heap buffer overflow via integer truncation 0.5%
• CVE-2026-6681 Low 1.0 PKCS#7 decode ignores caller output buffer size, writing past buffer bounds 0.4%
• CVE-2026-6731 Medium 6.0 X.509 name constraint bypass via Subject CN treated as a DNS name 0.1%
• CVE-2026-7531 Low 2.3 Use-after-free in PQC hybrid key-share handling 0.5%