{"items":[{"id":"CVE-2026-84897","published":"2026-10-07T02:42:28.388Z","updated":"2026-10-07T18:37:00.316Z","title":"wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion","severity":"MEDIUM","score":6.9,"vendor":"wolfSSL Inc.","product":"wolfSSH","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2026-83742","published":"2026-10-07T02:41:48.911Z","updated":"2026-10-07T11:30:28.937Z","title":"wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms","severity":"MEDIUM","score":5.3,"vendor":"wolfSSL Inc.","product":"wolfSSH","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2026-83540","published":"2026-10-07T02:40:35.137Z","updated":"2026-10-07T11:29:08.132Z","title":"wolfSSHd on Windows race condition leading to logon token reused across connections","severity":"HIGH","score":7.7,"vendor":"wolfSSL","product":"wolfSSH","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2026-81535","published":"2026-10-07T02:39:27.830Z","updated":"2026-10-07T18:37:36.186Z","title":"wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL Inc.","product":"wolfSSH","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2026-16516","published":"2026-10-07T02:38:23.334Z","updated":"2026-10-07T11:17:14.029Z","title":"wolfSSH ECDSA host key curve not validated against negotiated algorithm","severity":"CRITICAL","score":9,"vendor":"wolfSSL Inc.","product":"wolfSSH","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-15442","published":"2026-09-27T09:24:31.594Z","updated":"2026-09-30T10:48:05.055Z","title":"Heap use-after-free on read during bidirectional (D)TLS shutdown","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-89102","published":"2026-09-27T09:22:42.265Z","updated":"2026-09-29T16:04:31.679Z","title":"OCSP stapling v2 multi accepts non-CA chain certificates as issuers","severity":"HIGH","score":8.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-89133","published":"2026-09-27T09:18:43.843Z","updated":"2026-09-29T16:16:06.256Z","title":"NameConstraints not enforced across unconstrained intermediate CA","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-89134","published":"2026-09-27T09:16:58.067Z","updated":"2026-09-29T16:37:26.748Z","title":"Subject CN name-constraint check bypassed when non-DNS SAN present","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2026-89135","published":"2026-09-27T09:14:44.599Z","updated":"2026-09-29T16:20:11.379Z","title":"Failed X509_verify_cert leaves unverified CA in shared CertManager","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-89136","published":"2026-09-27T09:12:39.137Z","updated":"2026-09-29T16:39:15.460Z","title":"Client accepts unsolicited RawPublicKey server certificate type","severity":"HIGH","score":8.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2026-93302","published":"2026-09-27T09:07:35.999Z","updated":"2026-09-29T16:41:22.187Z","title":"Trusted peer certificate match ignores public key, allowing forged CA clones","severity":"HIGH","score":8.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-93304","published":"2026-09-27T09:05:37.132Z","updated":"2026-09-29T16:43:16.572Z","title":"(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2026-94417","published":"2026-09-27T09:00:59.581Z","updated":"2026-09-29T17:33:10.533Z","title":"CRL check skipped when OCSP enabled and certificate has no OCSP URL","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-94418","published":"2026-09-27T08:58:56.538Z","updated":"2026-09-29T16:45:58.115Z","title":"Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-94419","published":"2026-09-27T08:54:18.510Z","updated":"2026-09-29T16:50:09.410Z","title":"Client session cache reference poisoning allows resumption with wrong server","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2026-81341","published":"2026-08-28T14:43:43.099Z","updated":"2026-08-28T18:17:50.111Z","title":"wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records","severity":"MEDIUM","score":6.5,"vendor":"wolfSSL Inc.","product":"wolfEngine","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2026-81020","published":"2026-08-28T14:42:59.202Z","updated":"2026-08-28T18:19:58.580Z","title":"wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record","severity":"HIGH","score":7.4,"vendor":"wolfSSL Inc.","product":"wolfEngine","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2026-81019","published":"2026-08-28T14:42:01.361Z","updated":"2026-08-28T18:22:34.803Z","title":"wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record","severity":"HIGH","score":7.4,"vendor":"wolfSSL Inc.","product":"wolfProvider","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2026-7511","published":"2026-06-25T21:32:29.283Z","updated":"2026-06-26T10:37:09.590Z","title":"PKCS7_verify signer confusion allows forged signatures to be accepted","severity":"MEDIUM","score":5.9,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-7532","published":"2026-06-25T21:31:11.577Z","updated":"2026-07-01T16:47:48.539Z","title":"iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined","severity":"MEDIUM","score":5.7,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-8720","published":"2026-06-25T21:18:29.260Z","updated":"2026-06-26T10:35:31.343Z","title":"HMAC-BLAKE2 final discards message when key length exceeds block size","severity":"MEDIUM","score":5.9,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2026-10098","published":"2026-06-25T21:16:45.850Z","updated":"2026-06-26T10:34:15.421Z","title":"OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-11703","published":"2026-06-25T21:15:20.576Z","updated":"2026-06-26T10:32:05.866Z","title":"Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-55962","published":"2026-06-25T21:12:38.074Z","updated":"2026-06-26T10:31:12.017Z","title":"TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-6092","published":"2026-06-25T21:06:20.494Z","updated":"2026-06-26T10:25:01.830Z","title":"Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2026-6325","published":"2026-06-25T21:04:31.827Z","updated":"2026-06-26T10:23:33.220Z","title":"Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list","severity":"LOW","score":2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-6329","published":"2026-06-25T21:02:45.860Z","updated":"2026-06-26T10:22:21.379Z","title":"PKCS#12 MAC verification uses attacker-controlled comparison length","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2026-6330","published":"2026-06-25T21:01:19.563Z","updated":"2026-06-26T10:20:49.418Z","title":"ML-KEM ARM64 NEON ciphertext comparison only compares half of the input","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2026-6331","published":"2026-06-25T20:56:25.876Z","updated":"2026-06-26T13:53:06.730Z","title":"HMAC zero-length tag forgery in EVP_DigestVerifyFinal","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-6412","published":"2026-06-25T20:38:29.761Z","updated":"2026-06-26T13:06:26.002Z","title":"Continued acceptance of SHA-1/MD5 digests in certificate processing","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2026-6450","published":"2026-06-25T20:18:53.909Z","updated":"2026-06-26T13:11:51.371Z","title":"CRL critical extension bypass in ParseCRL_Extensions","severity":"LOW","score":1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-6678","published":"2026-06-25T20:16:08.416Z","updated":"2026-07-01T16:47:47.199Z","title":"Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info","severity":"LOW","score":1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-6679","published":"2026-06-25T20:13:06.190Z","updated":"2026-06-26T13:13:41.022Z","title":"DTLS 1.3 ACK serialization heap buffer overflow via integer truncation","severity":"HIGH","score":8.8,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00505,"kevAdded":null},{"id":"CVE-2026-6681","published":"2026-06-25T20:11:39.446Z","updated":"2026-06-26T13:14:09.177Z","title":"PKCS#7 decode ignores caller output buffer size, writing past buffer bounds","severity":"LOW","score":1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2026-6731","published":"2026-06-25T20:08:13.248Z","updated":"2026-06-26T13:16:07.279Z","title":"X.509 name constraint bypass via Subject CN treated as a DNS name","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-7531","published":"2026-06-25T20:01:16.991Z","updated":"2026-06-26T13:17:13.271Z","title":"Use-after-free in PQC hybrid key-share handling","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2026-10097","published":"2026-06-25T19:59:30.848Z","updated":"2026-06-26T16:35:41.759Z","title":"ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery","severity":"HIGH","score":8.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2026-10512","published":"2026-06-25T19:58:16.013Z","updated":"2026-06-26T13:49:49.898Z","title":"X25519 x86_64 assembly final reduction leaves non-canonical field element","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2026-10592","published":"2026-06-25T19:40:11.966Z","updated":"2026-06-26T14:03:28.814Z","title":"Wildcard DNS SAN bypasses CA name-constraint checks","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2026-11310","published":"2026-06-25T19:38:19.099Z","updated":"2026-06-26T14:02:37.876Z","title":"X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring","severity":"HIGH","score":8.7,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-12340","published":"2026-06-25T19:36:21.468Z","updated":"2026-06-26T13:59:21.953Z","title":"Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00298,"kevAdded":null},{"id":"CVE-2026-55958","published":"2026-06-25T19:35:21.155Z","updated":"2026-06-26T13:58:52.483Z","title":"Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage","severity":"HIGH","score":8.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2026-55960","published":"2026-06-25T19:31:55.861Z","updated":"2026-06-26T13:58:17.060Z","title":"Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation","severity":"HIGH","score":8.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-55964","published":"2026-06-25T19:30:34.789Z","updated":"2026-06-26T13:57:29.942Z","title":"Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-11999","published":"2026-06-25T16:56:14.163Z","updated":"2026-06-25T17:56:41.168Z","title":"X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()","severity":"HIGH","score":8.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-55967","published":"2026-06-25T16:53:14.695Z","updated":"2026-06-25T17:57:09.838Z","title":"AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse","severity":"LOW","score":2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2026-55961","published":"2026-06-25T16:51:18.157Z","updated":"2026-06-25T17:57:46.226Z","title":"wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer","severity":"HIGH","score":8.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-6091","published":"2026-06-25T16:46:12.599Z","updated":"2026-06-25T17:58:31.045Z","title":"Partial-chain verification accepts untrusted intermediate as trust anchor","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-6291","published":"2026-06-25T16:41:42.232Z","updated":"2026-06-25T17:59:08.922Z","title":"Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-6094","published":"2026-06-25T16:35:48.013Z","updated":"2026-06-25T17:59:41.485Z","title":"Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2026-0930","published":"2026-04-20T21:28:33.227Z","updated":"2026-04-21T13:37:15.647Z","title":"Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSH","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2026-5477","published":"2026-04-10T05:06:22.884Z","updated":"2026-04-10T14:04:00.411Z","title":"Prefix-substitution forgery via integer overflow in wolfCrypt CMAC","severity":"HIGH","score":8.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2026-5188","published":"2026-04-10T03:24:21.126Z","updated":"2026-04-10T13:41:51.326Z","title":"Integer underflow in X.509 SAN parsing in wolfSSL","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2026-5500","published":"2026-04-10T03:10:25.671Z","updated":"2026-04-10T13:42:28.091Z","title":"Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass","severity":"HIGH","score":8.7,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2026-5501","published":"2026-04-10T03:07:39.604Z","updated":"2026-04-22T13:59:28.514Z","title":"Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates","severity":"HIGH","score":8.6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2026-5466","published":"2026-04-10T03:00:42.976Z","updated":"2026-04-22T03:55:48.877Z","title":"wc_VerifyEccsiHash missing sanity check","severity":"HIGH","score":7.6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-5479","published":"2026-04-10T02:38:39.918Z","updated":"2026-04-22T03:55:50.004Z","title":"wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag","severity":"HIGH","score":7.6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-5460","published":"2026-04-09T23:29:27.577Z","updated":"2026-04-10T13:51:18.283Z","title":"Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-5448","published":"2026-04-09T23:18:15.780Z","updated":"2026-04-10T13:51:56.742Z","title":"1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2026-5392","published":"2026-04-09T23:10:55.739Z","updated":"2026-04-10T14:08:48.204Z","title":"wolfSSL heap OOB read in PKCS7 SignedData streaming","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-5393","published":"2026-04-09T23:02:28.747Z","updated":"2026-04-10T15:02:58.096Z","title":"OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2026-5295","published":"2026-04-09T22:53:10.635Z","updated":"2026-04-14T14:32:57.454Z","title":"Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID","severity":"MEDIUM","score":5.9,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-5503","published":"2026-04-09T22:35:39.437Z","updated":"2026-04-10T17:58:51.312Z","title":"out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName","severity":"MEDIUM","score":6.9,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2026-5504","published":"2026-04-09T22:33:42.179Z","updated":"2026-04-14T14:34:40.546Z","title":"PKCS7 CBC Padding Oracle — Plaintext Recovery","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2026-5507","published":"2026-04-09T22:18:44.067Z","updated":"2026-04-14T14:38:40.362Z","title":"Session Cache Restore — Arbitrary Free via Deserialized Pointer","severity":"MEDIUM","score":4.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2026-5772","published":"2026-04-09T21:50:04.038Z","updated":"2026-04-10T13:52:58.722Z","title":"MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2026-5778","published":"2026-04-09T21:45:09.053Z","updated":"2026-04-10T13:53:29.181Z","title":"Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2026-5264","published":"2026-04-09T21:43:12.479Z","updated":"2026-04-10T13:55:41.431Z","title":"DTLS 1.3 ACK heap buffer overflow","severity":"HIGH","score":8.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-5263","published":"2026-04-09T21:15:48.148Z","updated":"2026-07-02T14:45:49.247Z","title":"URI nameConstraints not enforced in ConfirmNameConstraints()","severity":"HIGH","score":7,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-5446","published":"2026-04-09T21:02:27.201Z","updated":"2026-04-10T18:11:52.759Z","title":"wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse","severity":"MEDIUM","score":6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-5447","published":"2026-04-09T20:13:34.398Z","updated":"2026-04-10T18:07:28.848Z","title":"Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-5187","published":"2026-04-09T19:45:39.937Z","updated":"2026-04-14T14:04:53.585Z","title":"Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00283,"kevAdded":null},{"id":"CVE-2026-5194","published":"2026-04-09T19:30:24.095Z","updated":"2026-05-23T22:06:54.008Z","title":"wolfSSL ECDSA Certificate Verification","severity":"CRITICAL","score":9.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2026-4159","published":"2026-03-19T21:17:46.357Z","updated":"2026-03-20T16:29:05.925Z","title":"wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read","severity":"LOW","score":1.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00099,"kevAdded":null},{"id":"CVE-2026-3229","published":"2026-03-19T21:07:05.871Z","updated":"2026-03-20T16:29:47.729Z","title":"Integer Overflow in Certificate Chain Allocation","severity":"LOW","score":1.2,"vendor":"wofSSL","product":"wolfSSL","kev":false,"epss":0.00067,"kevAdded":null},{"id":"CVE-2026-3230","published":"2026-03-19T20:59:54.021Z","updated":"2026-03-20T17:09:01.453Z","title":"Improper key_share validation in TLS 1.3 HelloRetryRequest","severity":"LOW","score":1.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-4395","published":"2026-03-19T20:41:55.642Z","updated":"2026-03-20T17:09:33.816Z","title":"Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path","severity":"LOW","score":1.3,"vendor":"wolfSSL","product":"wolfssl","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2026-3849","published":"2026-03-19T20:29:30.839Z","updated":"2026-03-25T14:21:17.389Z","title":"Buffer Overflow in HPKE via Oversized ECH Config","severity":"MEDIUM","score":6.9,"vendor":"wolfSSL Inc.","product":"wolfSSL","kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2026-3547","published":"2026-03-19T20:20:42.608Z","updated":"2026-03-21T03:33:23.444Z","title":"wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation","severity":"HIGH","score":7.5,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2026-3549","published":"2026-03-19T20:09:27.036Z","updated":"2026-03-24T01:38:13.951Z","title":"ECH parsing heap buffer overflow","severity":"HIGH","score":8.3,"vendor":"wofSSL","product":"wolfSSL","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2026-3580","published":"2026-03-19T19:46:58.783Z","updated":"2026-03-19T20:25:20.427Z","title":"Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2026-3579","published":"2026-03-19T19:37:23.642Z","updated":"2026-03-24T01:36:54.479Z","title":"Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2026-3503","published":"2026-03-19T18:12:26.909Z","updated":"2026-03-19T19:24:36.198Z","title":"Fault injection attack with ML-DSA and ML-KEM on ARM","severity":"MEDIUM","score":4.3,"vendor":"wolfSSL Inc.","product":"wolfSSL (wolfCrypt)","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-3548","published":"2026-03-19T17:45:16.717Z","updated":"2026-03-19T18:00:53.844Z","title":"Buffer overflow in CRL number parsing in wolfSSL","severity":"HIGH","score":7.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.005,"kevAdded":null},{"id":"CVE-2026-2646","published":"2026-03-19T17:25:42.810Z","updated":"2026-03-19T17:44:09.675Z","title":"Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function","severity":"MEDIUM","score":5,"vendor":"wolfssl","product":"wolfssl","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-2645","published":"2026-03-19T17:10:22.919Z","updated":"2026-03-19T17:45:54.299Z","title":"Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2","severity":"MEDIUM","score":5.5,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0013,"kevAdded":null},{"id":"CVE-2026-1005","published":"2026-03-19T17:00:10.166Z","updated":"2026-03-19T17:20:03.448Z","title":"Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2026-0819","published":"2026-03-19T16:54:33.442Z","updated":"2026-03-19T17:19:37.134Z","title":"Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes","severity":"LOW","score":2.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2025-15346","published":"2026-01-07T23:32:11.146Z","updated":"2026-01-08T19:22:49.043Z","title":"wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement","severity":"CRITICAL","score":9.3,"vendor":"wolfSSL","product":"wolfSSL-py","kev":false,"epss":0.00334,"kevAdded":null},{"id":"CVE-2025-15382","published":"2026-01-06T17:43:44.228Z","updated":"2026-01-06T18:13:28.245Z","title":"Client SCP Request Triggers Buffer Overread by 1 Byte","severity":"MEDIUM","score":5.1,"vendor":"wolfSSL","product":"wolfSSH","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2025-14942","published":"2026-01-06T17:26:30.360Z","updated":"2026-01-06T18:15:26.420Z","title":"Authentication Bypass","severity":"CRITICAL","score":9.4,"vendor":"wolfSSL","product":"wolfSSH","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2025-13912","published":"2025-12-11T17:09:59.098Z","updated":"2025-12-11T19:35:56.056Z","title":"Potential non-constant time compiled code with Clang LLVM","severity":"LOW","score":1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2025-12889","published":"2025-11-21T23:06:59.827Z","updated":"2025-12-08T15:39:52.743Z","title":"TLS 1.2 Client Can Downgrade Digest Used","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2025-11932","published":"2025-11-21T23:01:03.321Z","updated":"2025-12-08T15:39:21.037Z","title":"Timing Side-Channel in PSK Binder Verification","severity":"LOW","score":2.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00275,"kevAdded":null},{"id":"CVE-2025-11931","published":"2025-11-21T22:57:32.802Z","updated":"2025-12-08T15:38:46.308Z","title":"Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2025-12888","published":"2025-11-21T22:50:30.510Z","updated":"2025-12-08T15:51:56.735Z","title":"Constant Time Issue with Xtensa-based ESP32 and X22519","severity":"LOW","score":1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00307,"kevAdded":null},{"id":"CVE-2025-11936","published":"2025-11-21T22:24:27.443Z","updated":"2025-12-08T15:50:46.421Z","title":"Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2025-11933","published":"2025-11-21T22:19:08.654Z","updated":"2025-12-08T15:47:25.494Z","title":"DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension","severity":"LOW","score":2.3,"vendor":"wofSSL","product":"wolfSSL","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2025-11934","published":"2025-11-21T22:12:37.868Z","updated":"2025-12-08T15:48:38.022Z","title":"Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify","severity":"LOW","score":2.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2025-11935","published":"2025-11-21T22:04:52.335Z","updated":"2025-12-08T15:49:43.595Z","title":"Forward Secrecy Violation in WolfSSL TLS 1.3","severity":"MEDIUM","score":6.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2025-11625","published":"2025-10-21T13:25:18.120Z","updated":"2026-01-06T17:45:15.401Z","title":"Host verification bypass and credential leak","severity":"CRITICAL","score":9.4,"vendor":"wolfSSL","product":"wolfSSH","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2025-11624","published":"2025-10-21T13:14:19.625Z","updated":"2025-10-21T14:08:16.924Z","title":"Buffer overwrite when processing file handles with the SFTP server","severity":"LOW","score":1.8,"vendor":"wolfSSH","product":"wolfSSH","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2025-7844","published":"2025-08-04T21:35:04.013Z","updated":"2025-08-05T13:36:36.065Z","title":"wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow","severity":"LOW","score":1,"vendor":"wolfSSL Inc.","product":"wolfTPM","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2025-7396","published":"2025-07-18T22:51:18.950Z","updated":"2025-07-21T15:05:59.222Z","title":"Curve25519 Blinding","severity":"MEDIUM","score":5.6,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2025-7394","published":"2025-07-18T22:34:23.849Z","updated":"2025-07-21T15:00:21.780Z","title":"In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values…","severity":"HIGH","score":7,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00459,"kevAdded":null},{"id":"CVE-2025-7395","published":"2025-07-18T22:15:59.460Z","updated":"2025-07-21T14:56:52.762Z","title":"Domain Name Validation Bypass with Apple Native Certificate Validation","severity":"CRITICAL","score":9.2,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2024-2881","published":"2024-08-29T23:10:59.179Z","updated":"2024-08-30T14:18:36.327Z","title":"Fault Injection of EdDSA signature in WolfCrypt","severity":"MEDIUM","score":6.7,"vendor":"WolfSSL","product":"wolfCrypt","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2024-1545","published":"2024-08-29T23:02:48.312Z","updated":"2026-01-27T21:58:13.959Z","title":"Fault Injection of RSA encryption in WolfCrypt","severity":"MEDIUM","score":5.9,"vendor":"WolfSSL","product":"wolfCrypt","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2024-1543","published":"2024-08-29T22:43:35.775Z","updated":"2024-08-30T14:19:32.248Z","title":"AES T-Table sub-cache-line leakage","severity":"MEDIUM","score":4.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2024-1544","published":"2024-08-27T18:44:52.770Z","updated":"2026-01-27T21:58:42.146Z","title":"ECDSA nonce bias caused by truncation","severity":"MEDIUM","score":4.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-5814","published":"2024-08-27T18:38:08.974Z","updated":"2024-08-27T19:21:04.561Z","title":"Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade","severity":"MEDIUM","score":5.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2024-5288","published":"2024-08-27T18:36:28.555Z","updated":"2024-08-27T19:23:20.376Z","title":"Safe-error attack on TLS 1.3 Protocol","severity":"MEDIUM","score":5.1,"vendor":"wolfSSL Inc.","product":"wolfSSL","kev":false,"epss":0.0042,"kevAdded":null},{"id":"CVE-2024-5991","published":"2024-08-27T18:33:27.550Z","updated":"2024-08-27T20:06:24.558Z","title":"Buffer overread in domain name matching","severity":"CRITICAL","score":10,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.0056,"kevAdded":null},{"id":"CVE-2024-0901","published":"2024-03-25T22:37:56.581Z","updated":"2024-08-01T18:39:44.207Z","title":"SEGV and out of bounds memory read from malicious packet","severity":"HIGH","score":7.5,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00694,"kevAdded":null},{"id":"CVE-2024-2873","published":"2024-03-25T21:58:52.325Z","updated":"2024-08-01T19:50:46.158Z","title":"User authentication bypass in wolfSSH server","severity":"CRITICAL","score":9.1,"vendor":"wolfSSL Inc.","product":"wolfSSH","kev":false,"epss":0.00623,"kevAdded":null},{"id":"CVE-2023-6936","published":"2024-02-20T21:52:02.441Z","updated":"2025-03-26T16:28:30.322Z","title":"Heap-buffer over-read with WOLFSSL_CALLBACKS","severity":"MEDIUM","score":5.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.006,"kevAdded":null},{"id":"CVE-2023-6937","published":"2024-02-15T17:21:44.342Z","updated":"2025-04-24T15:13:34.315Z","title":"Improper (D)TLS key boundary enforcement","severity":"MEDIUM","score":5.3,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2023-6935","published":"2024-02-09T22:25:04.663Z","updated":"2024-08-02T08:42:08.533Z","title":"Marvin Attack vulnerability in SP Math All RSA","severity":"MEDIUM","score":5.9,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2023-3724","published":"2023-07-17T21:13:10.623Z","updated":"2024-10-29T15:53:43.066Z","title":"TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension","severity":"CRITICAL","score":9.1,"vendor":"wolfSSL","product":"wolfSSL","kev":false,"epss":0.00652,"kevAdded":null}]}