CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,501 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,501
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product wolfssl:wolfssl. Show all products

88 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2026-15442Low 2.3Heap use-after-free on read during bidirectional (D)TLS shutdown
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-89102High 8.3OCSP stapling v2 multi accepts non-CA chain certificates as issuers
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-89133Medium 6.3NameConstraints not enforced across unconstrained intermediate CA
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-89134Medium 6.3Subject CN name-constraint check bypassed when non-DNS SAN present
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-89135Medium 6.3Failed X509_verify_cert leaves unverified CA in shared CertManager
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-89136High 8.3Client accepts unsolicited RawPublicKey server certificate type
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-93302High 8.3Trusted peer certificate match ignores public key, allowing forged CA clones
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-93304Medium 6.3(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-94417Low 2.3CRL check skipped when OCSP enabled and certificate has no OCSP URL
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-94418Low 2.3Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-94419Low 2.3Client session cache reference poisoning allows resumption with wrong server
Assigned by wolfSSL
Sep 27, 2026
CVE-2026-8720High 7.5wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input.Jun 25, 2026
CVE-2026-7532High 7.5iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined.Jun 25, 2026
CVE-2026-7511High 7.5PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted.Jun 25, 2026
CVE-2026-6331High 7.5HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC verification.Jun 25, 2026
CVE-2026-6330Medium 6.5The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path.Jun 25, 2026
CVE-2026-6329Medium 6.5PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted.Jun 25, 2026
CVE-2026-6325High 7.5Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.Jun 25, 2026
CVE-2026-6092Medium 5.3When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.Jun 25, 2026
CVE-2026-55962Medium 6.5TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify.Jun 25, 2026
CVE-2026-11703High 7.5Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for ticket-based resumption.Jun 25, 2026
CVE-2026-10098Medium 5.3OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be reported as the revocation status o…Jun 25, 2026
CVE-2026-6731High 7.5X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name.Jun 25, 2026
CVE-2026-6681Medium 5.3The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer.Jun 25, 2026
CVE-2026-6679High 7.5A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated.Jun 25, 2026
CVE-2026-6678Medium 5.3Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handling during decryption.Jun 25, 2026
CVE-2026-6450Medium 5.3A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted.Jun 25, 2026
CVE-2026-6412Medium 4.3Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate processing.Jun 25, 2026
CVE-2026-7531Critical 9.8Use-after-free in PQC hybrid key-share handling.Jun 25, 2026
CVE-2026-55964Medium 5.3Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA.Jun 25, 2026
CVE-2026-55960High 7.5Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation.Jun 25, 2026
CVE-2026-55958High 7.5Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer.Jun 25, 2026
CVE-2026-12340High 7.5Out-of-bounds heap read during SM2/SM3 certificate signature verification.Jun 25, 2026
CVE-2026-11310High 7.5X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()).Jun 25, 2026
CVE-2026-10592Medium 5.3Certificates with wildcard DNS SANs (e.g.Jun 25, 2026
CVE-2026-10512High 7.5The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the field prime 2^255 - 19.Jun 25, 2026
CVE-2026-10097High 7.5wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation.Jun 25, 2026
CVE-2026-6291Medium 6.5Bleichenbacher padding oracle in PKCS#7 KTRI decryption.Jun 25, 2026
CVE-2026-6094Critical 9.1Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData.Jun 25, 2026
CVE-2026-6091Medium 6.5Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor.Jun 25, 2026
CVE-2026-55967High 7.5AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent p…Jun 25, 2026
CVE-2026-55961High 7.5wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer.Jun 25, 2026
CVE-2026-11999High 7.5X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()).Jun 25, 2026
CVE-2026-5477High 7.5An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge CMAC tags.Apr 10, 2026
CVE-2026-5501High 8.1wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Con…Apr 10, 2026
CVE-2026-5500Medium 5.9wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check.Apr 10, 2026
CVE-2026-5479High 8.1In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails to verify the authentication tag before returning p…Apr 10, 2026
CVE-2026-5466High 8.1wolfSSL's ECCSI signature verifier `wc_VerifyEccsiHash` decodes the `r` and `s` scalars from the signature blob via `mp_read_unsigned_bin` with no check that they lie in `[1, q-1]`.Apr 10, 2026
CVE-2026-5188High 8.1An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates.Apr 10, 2026
CVE-2026-5460Medium 6.5A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.Apr 10, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.