{"kind": "product", "path": "vulns/debian-12/wolfssl", "name": "wolfssl", "product": "wolfssl", "ecosystem": "Debian:12", "items": [{"id": "CVE-2026-95208", "noindex": false, "published": "2026-10-08T00:00:00.000Z", "modified": "2026-10-08T20:16:24.707Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00172, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-95208", "title": "CVE-2026-95208", "description": "An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.", "references": ["http://wolfssl.com", "https://gist.github.com/lkloliver/14edf8bbfbf5769949b85c7f5cc2eba2", "https://nvd.nist.gov/vuln/detail/CVE-2026-95208"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-15442", "noindex": false, "published": "2026-09-27T09:24:31.594Z", "modified": "2026-09-30T10:48:05.055Z", "cvss": 2.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00207, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-15442", "title": "Heap use-after-free on read during bidirectional (D)TLS shutdown", "description": "In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after free. If an application ended up getting a partial wolfSSL_read() which is sometimes caused by a small user buffer  passed in, then called wolfSSL_shutdown for a bidirectional close and attempted to wolfSSL_read() again while the peer continues trying to send data during the shutdown it would lead to a state where a potential heap-use-after free happened.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10863", "https://nvd.nist.gov/vuln/detail/CVE-2026-15442"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-89133", "noindex": false, "published": "2026-09-27T09:18:43.843Z", "modified": "2026-09-29T16:16:06.256Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00128, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-89133", "title": "NameConstraints not enforced across unconstrained intermediate CA", "description": "wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificate. wolfSSL incorrectly accepted certificates for hostnames they shouldn't be allowed to cover, due to a chain-walking state-machine bug that resets the validation state when encountering an intermediate without NameConstraints, thereby bypassing cryptographic delegation controls. This defect exists in the default build configuration that makes use of certificates where name constraint ext", "references": ["https://github.com/wolfSSL/wolfssl/pull/10687", "https://nvd.nist.gov/vuln/detail/CVE-2026-89133"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-89134", "noindex": false, "published": "2026-09-27T09:16:58.067Z", "modified": "2026-09-29T16:37:26.748Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00173, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-89134", "title": "Subject CN name-constraint check bypassed when non-DNS SAN present", "description": "A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert->subjectCN != NULL && cert->altNames == NULL && !cert->isCA instead of \"no dNSName SAN\", so an out-of-scope CN was accepted. This incomplete fix from CVE-2026-6731, leading to the name-constraint check issue, was introduced in wolfSSL version 5.9.2.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10837", "https://nvd.nist.gov/vuln/detail/CVE-2026-89134"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-89135", "noindex": false, "published": "2026-09-27T09:14:44.599Z", "modified": "2026-09-29T16:20:11.379Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00112, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-89135", "title": "Failed X509_verify_cert leaves unverified CA in shared CertManager", "description": "A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer (native TLS, OCSP, CRL, direct CM verify). This affects version 5.8.4 through 5.9.2 of wolfSSL with the macros (OPENSSL_EXTRA && !NO_CERTS && !WOLFCRYPT_ONLY) defined or built with --enable-opensslextra and the application is specifically making calls to the X509_verify_cert function.", "references": ["https://github.com/wolfSSL/wolfssl/pull/11009", "https://nvd.nist.gov/vuln/detail/CVE-2026-89135"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-93302", "noindex": false, "published": "2026-09-27T09:07:35.999Z", "modified": "2026-09-29T16:41:22.187Z", "cvss": 8.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00237, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93302", "title": "Trusted peer certificate match ignores public key, allowing forged CA clones", "description": "MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL_TRUST_PEER_CERT and load CA certificates with wolfSSL_CTX_trust_peer_cert() or wolfSSL_trust_peer_cert(). The peer must know the certificates being loaded to either of those APIs to take advantage of the issue. When OPENSSL_COMPATIBLE_DEFAULTS is also defined this widens the affected API to include all CA certificate loading. Both macros are defined when using autoconf builds such as (nginx, haproxy, stunnel, wpas, apache httpd, hitch, bind, rsyslog, ffmpeg, all, distro). When the certificate is", "references": ["https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93302"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-93304", "noindex": false, "published": "2026-09-27T09:05:37.132Z", "modified": "2026-09-29T16:43:16.572Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00151, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93304", "title": "(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange", "description": "A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at that point, so the client installs read keys derived from a known (deterministic) key and checks the server's Finished against that same key. An out-of-order ChangeCipherSpec can therefore be used by an attacker to complete the handshake in place of the server and send data the client accepts as authentic. The client's own traffic still uses correctly derived keys, so the attacker cannot read it, and the genuine server never completes the handshake. DTLS 1.2 clients are exposed because a datagram read can de", "references": ["https://github.com/wolfSSL/wolfssl/pull/11458", "https://nvd.nist.gov/vuln/detail/CVE-2026-93304"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-94417", "noindex": false, "published": "2026-09-27T09:00:59.581Z", "modified": "2026-09-29T17:33:10.533Z", "cvss": 2.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00168, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-94417", "title": "CRL check skipped when OCSP enabled and certificate has no OCSP URL", "description": "When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer certificate that carries no Authority Information Access OCSP URL, and accepts a certificate the loaded CRL lists as revoked. The soft-fail policy for a missing responder collapses the OCSP result onto success before the code decides whether the CRL fallback is still needed, so \"no responder exists\" becomes indistinguishable from \"the responder answered good\". Affected builds define both HAVE_OCSP and HAVE_CRL: --enable-ocsp --enable-crl directly, and implicitly --enable-all, --enable-distro, --", "references": ["https://github.com/wolfSSL/wolfssl/pull/11500", "https://nvd.nist.gov/vuln/detail/CVE-2026-94417"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-94418", "noindex": false, "published": "2026-09-27T08:58:56.538Z", "modified": "2026-09-29T16:45:58.115Z", "cvss": 2.3, "cvss_vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00107, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-94418", "title": "Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY", "description": "Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative() reaches its validity-date, name-constraint and critical-extension checks only after ConfirmSignature() has passed, so splitting the signature check out inverts the precedence that makes \"override date errors\" a sound policy, and ASN_SIG_CONFIRM_E is never surfaced anywhere. The attacker needs no key material from the real PKI and no CA compromise: a self-", "references": ["https://github.com/wolfSSL/wolfssl/pull/11500", "https://nvd.nist.gov/vuln/detail/CVE-2026-94418"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-94419", "noindex": false, "published": "2026-09-27T08:54:18.510Z", "modified": "2026-09-29T16:50:09.410Z", "cvss": 2.3, "cvss_vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.001, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-94419", "title": "Client session cache reference poisoning allows resumption with wrong server", "description": "Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of the form {row, index, hash(sessionID)} into the process-global SessionCache, and ClientSessionToSession() validates it against that hash alone. Because the TLS 1.2 session ID is chosen by the server and sent in clear, AddSessionToCache() matches any other server's session on the same ID and overwrites the client-side entry with that server's master secret, cipher suite and version, while the handle continues to resolve; nothing on the write path compares the peer, the application's server ID or the WOLFSSL_CTX. Resuming throug", "references": ["https://github.com/wolfSSL/wolfssl/pull/11500", "https://nvd.nist.gov/vuln/detail/CVE-2026-94419"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-7511", "noindex": false, "published": "2026-06-25T21:32:29.283Z", "modified": "2026-06-26T10:37:09.590Z", "cvss": 5.9, "cvss_vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00255, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-7511", "title": "PKCS7_verify signer confusion allows forged signatures to be accepted", "description": "PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10203", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-7511"], "fixes": ["5.5.4-2+deb12u3"], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-7532", "noindex": false, "published": "2026-06-25T21:31:11.577Z", "modified": "2026-07-01T16:47:48.539Z", "cvss": 5.7, "cvss_vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00288, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-7532", "title": "iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined", "description": "iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP address constraints.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10354", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2409"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-8720", "noindex": false, "published": "2026-06-25T21:18:29.260Z", "modified": "2026-06-26T10:35:31.343Z", "cvss": 5.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00158, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-8720", "title": "HMAC-BLAKE2 final discards message when key length exceeds block size", "description": "wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the accumulated message data, so the resulting MAC depended only on the key and not on the message being authenticated. This bug is specific to the HMAC-BLAKE2 APIs that were added in wolfSSL version 5.9.0.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10447", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-8720"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-10098", "noindex": false, "published": "2026-06-25T21:16:45.850Z", "modified": "2026-06-26T10:34:15.421Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.0019, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-10098", "title": "OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status", "description": "OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be reported as the revocation status of a different certificate. The lookup compared serial-number bytes without first requiring the two serial numbers to be of equal length, so a SingleResponse for one certificate (same issuer) whose serial is a prefix of the target's serial would match, returning the wrong certificate's status. The fix requires the serial lengths to be equal before comparing the serial bytes.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10554", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-10098"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-11703", "noindex": false, "published": "2026-06-25T21:15:20.576Z", "modified": "2026-06-26T10:32:05.866Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00359, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-11703", "title": "Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption", "description": "Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual hosts, carry the cached peer-authentication state into a context it was not established for. Resumption now verifies the SNI/ALPN binding for all paths and declines (falling back to a full handshake) on mismatch.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10489", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-11703"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-55962", "noindex": false, "published": "2026-06-25T21:12:38.074Z", "modified": "2026-06-26T10:31:12.017Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-55962", "title": "TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify", "description": "TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, but it was also being applied while a post-handshake CertificateRequest was still outstanding. The check is now scoped to the initial handshake only: on the server, once a post-handshake CertificateRequest has been sent (certReqCtx is set), a peer certificate and a valid CertificateVerify are required again before the Finished is accepted, with empty", "references": ["https://github.com/wolfSSL/wolfssl/pull/10702", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-55962"], "fixes": ["5.5.4-2+deb12u3"], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-6092", "noindex": false, "published": "2026-06-25T21:06:20.494Z", "modified": "2026-06-26T10:25:01.830Z", "cvss": 2.1, "cvss_vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Clear", "severity": "low", "epss": 0.00384, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6092", "title": "Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured", "description": "When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10167", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-6092"], "fixes": ["5.5.4-2+deb12u3"], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-6325", "noindex": false, "published": "2026-06-25T21:04:31.827Z", "modified": "2026-06-26T10:23:33.220Z", "cvss": 2, "cvss_vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/U:Clear", "severity": "low", "epss": 0.00294, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6325", "title": "Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list", "description": "Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10204", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-6325"], "fixes": ["5.5.4-2+deb12u3"], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-6329", "noindex": false, "published": "2026-06-25T21:02:45.860Z", "modified": "2026-06-26T10:22:21.379Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00213, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6329", "title": "PKCS#12 MAC verification uses attacker-controlled comparison length", "description": "PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS#12 verify path compared the locally computed HMAC against the MAC parsed from the PKCS#12 structure using a length taken directly from the attacker-supplied input, without first verifying that it equals the length of the digest actually produced by the configured algorithm. A truncated or zero-length stored MAC could therefore be accepted, defeating the integrity protection of the MAC.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10192", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-6329"], "fixes": ["5.5.4-2+deb12u3"], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-6330", "noindex": false, "published": "2026-06-25T21:01:19.563Z", "modified": "2026-06-26T10:20:49.418Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00169, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6330", "title": "ML-KEM ARM64 NEON ciphertext comparison only compares half of the input", "description": "The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating party could fail to detect a manipulated ciphertext and proceed without the standard's required implicit rejection.", "references": ["https://github.com/wolfSSL/wolfssl/pull/10192", "https://www.wolfssl.com/docs/security-vulnerabilities/", "https://nvd.nist.gov/vuln/detail/CVE-2026-6330"], "fixes": [], "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}]}], "total": 149, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 8, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "wolfssl", "path": "vulns/debian-12/wolfssl", "ecosystem": "Debian:12"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 1, "kev": 0}, "lastmod": "2026-10-08T20:16:24.707Z", "early_advisories": [], "license": "Vous pouvez librement utiliser la sélection de PatchFirst et nos ajouts (priorités, alertes précoces, textes, synthèses et agrégats) pour vos propres besoins, y compris les activités internes de votre entreprise. La revente, la distribution commerciale et la mise en miroir massive de cette sélection ou de ces ajouts nécessitent un accord écrit avec l’opérateur. Lors de toute utilisation ou publication de la sélection ou de nos ajouts, citez PatchFirst (https://patchfirst.dev/vulns/) avec ce lien vers la page du flux de votre région. Les enregistrements originaux des sources ouvertes restent soumis à leurs licences et conditions respectives. Ces conditions ne limitent pas vos droits sur les données originales, que vous pouvez obtenir directement auprès de ces sources.", "terms_url": "https://patchfirst.dev/fr/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst sélectionne, normalise et combine les enregistrements ; des synthèses et des traductions peuvent être ajoutées. Les actualités sont accompagnées d’un lien vers la source originale dans chaque entrée.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Les licences des bases d’origine varient ; voir le catalogue des sources."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Évaluations publiques gratuites ; mention de la source demandée (FIRST EPSS, évaluations produites par Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}