[ Vendor · 4 CVEs ]
wolfSSL Inc.
CVEs affecting wolfSSL Inc. published in the last 30 days, plus any wolfSSL Inc. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-84897 | 7 Oct 2026 | CVSS 5.3 | wolfSSL Inc. wolfSSHsrc/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and… | Fix |
| CVE-2026-81535 | 7 Oct 2026 | CVSS 9.1 | wolfSSL Inc. wolfSSHIn wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy… | Fix |
| CVE-2026-83742 | 7 Oct 2026 | CVSS 8.8 | wolfSSL Inc. wolfSSHUnsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an… | Fix |
| CVE-2026-16516 | 7 Oct 2026 | CVSS 7.4 | wolfSSL Inc. wolfSSHwolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In… | Fix |