[ Vendor · 12 CVEs ]
wolfSSL
CVEs affecting wolfSSL published in the last 30 days, plus any wolfSSL CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-83540 | 7 Oct 2026 | CVSS 8.8 | wolfSSL wolfSSHWhen password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated… | Fix |
| CVE-2026-89134 | 27 Sep 2026 | CVSS 9.1 | wolfSSLA certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint… | Fix |
| CVE-2026-89135 | 27 Sep 2026 | CVSS 6.5 | wolfSSLA failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every… | Fix |
| CVE-2026-89136 | 27 Sep 2026 | CVSS 8.3 | wolfSSLWhen using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited server_cert_type=RawPublicKey… | |
| CVE-2026-93302 | 27 Sep 2026 | CVSS 8.2 | wolfSSLMatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro… | Fix |
| CVE-2026-93304 | 27 Sep 2026 | CVSS 3.7 | wolfSSLA (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at that point… | Fix |
| CVE-2026-94417 | 27 Sep 2026 | CVSS 5.3 | wolfSSLWhen an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer… | |
| CVE-2026-89102 | 27 Sep 2026 | CVSS 6.5 | wolfSSLIn wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to… | Fix |
| CVE-2026-89133 | 27 Sep 2026 | CVSS 5.3 | wolfSSLwolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints… | |
| CVE-2026-15442 | 27 Sep 2026 | CVSS 5.3 | wolfSSLIn all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to… | |
| CVE-2026-94418 | 27 Sep 2026 | CVSS 7.5 | wolfSSLUnder WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to keep peak memory down, then… | |
| CVE-2026-94419 | 27 Sep 2026 | CVSS 5.4 | wolfSSLWithout NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of the form {row, index… | Fix |