Wolfssl vulnerabilities
118 CVEs and advisories name Wolfssl as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84897wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
- CVE-2026-83742wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
- CVE-2026-83540wolfSSHd on Windows race condition leading to logon token reused across connections
- CVE-2026-81535wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
- CVE-2026-16516wolfSSH ECDSA host key curve not validated against negotiated algorithm
- CVE-2026-15442Heap use-after-free on read during bidirectional (D)TLS shutdown
- CVE-2026-89102OCSP stapling v2 multi accepts non-CA chain certificates as issuers
- CVE-2026-89133NameConstraints not enforced across unconstrained intermediate CA
- CVE-2026-89134Subject CN name-constraint check bypassed when non-DNS SAN present
- CVE-2026-89135Failed X509_verify_cert leaves unverified CA in shared CertManager
- CVE-2026-89136Client accepts unsolicited RawPublicKey server certificate type
- CVE-2026-93302Trusted peer certificate match ignores public key, allowing forged CA clones
- CVE-2026-93304(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange
- CVE-2026-94417CRL check skipped when OCSP enabled and certificate has no OCSP URL
- CVE-2026-94418Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
- CVE-2026-94419Client session cache reference poisoning allows resumption with wrong server
- CVE-2026-81341wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
- CVE-2026-81020wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
- CVE-2026-81019wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
- CVE-2026-7511PKCS7_verify signer confusion allows forged signatures to be accepted
- CVE-2026-7532iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined
- CVE-2026-8720HMAC-BLAKE2 final discards message when key length exceeds block size
- CVE-2026-10098OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status
- CVE-2026-11703Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption
- CVE-2026-55962TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify
- CVE-2026-6092Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured
- CVE-2026-6325Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list
- CVE-2026-6329PKCS#12 MAC verification uses attacker-controlled comparison length
- CVE-2026-6330ML-KEM ARM64 NEON ciphertext comparison only compares half of the input
- CVE-2026-6331HMAC zero-length tag forgery in EVP_DigestVerifyFinal