What’s Vulnerable › Products

wolfSSL vulnerabilities

154 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 92 published in the last 12 months.

Check whether your wolfSSL version is affected

Latest wolfSSL vulnerabilities

• CVE-2026-94417 — CRL check skipped when OCSP enabled and certificate has no OCSP URL (CVSS 5.3)
• CVE-2026-93304 — (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange (CVSS 3.7)
• CVE-2026-93302 — Trusted peer certificate match ignores public key, allowing forged CA clones (CVSS 8.2)
• CVE-2026-89136 — Client accepts unsolicited RawPublicKey server certificate type (CVSS 8.3)
• CVE-2026-89135 — Failed X509_verify_cert leaves unverified CA in shared CertManager (CVSS 6.5)
• CVE-2026-89134 — Subject CN name-constraint check bypassed when non-DNS SAN present (CVSS 9.1)
• CVE-2026-89133 — NameConstraints not enforced across unconstrained intermediate CA (CVSS 5.3)
• CVE-2026-89102 — OCSP stapling v2 multi accepts non-CA chain certificates as issuers (CVSS 6.5)
• CVE-2026-15442 — Heap use-after-free on read during bidirectional (D)TLS shutdown (CVSS 5.3)
• CVE-2026-94419 — Client session cache reference poisoning allows resumption with wrong server (CVSS 5.4)
• CVE-2026-94418 — Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY (CVSS 7.5)
• CVE-2026-8720 — HMAC-BLAKE2 final discards message when key length exceeds block size (CVSS 7.5)
• CVE-2026-7532 — iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined (CVSS 7.5)
• CVE-2026-7511 — PKCS7_verify signer confusion allows forged signatures to be accepted (CVSS 7.5)
• CVE-2026-6331 — HMAC zero-length tag forgery in EVP_DigestVerifyFinal (CVSS 7.5)
• CVE-2026-6330 — ML-KEM ARM64 NEON ciphertext comparison only compares half of the input (CVSS 6.5)
• CVE-2026-6329 — PKCS#12 MAC verification uses attacker-controlled comparison length (CVSS 6.5)
• CVE-2026-6325 — Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list (CVSS 7.5)
• CVE-2026-6092 — Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured (CVSS 5.3)
• CVE-2026-55962 — TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify (CVSS 6.5)
• CVE-2026-11703 — Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption (CVSS 7.5)
• CVE-2026-10098 — OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status (CVSS 5.3)
• CVE-2026-6731 — X.509 name constraint bypass via Subject CN treated as a DNS name (CVSS 7.5)
• CVE-2026-6681 — PKCS#7 decode ignores caller output buffer size, writing past buffer bounds (CVSS 5.3)
• CVE-2026-6679 — DTLS 1.3 ACK serialization heap buffer overflow via integer truncation (CVSS 7.5)