CVE-2026-6412

概要

参考情報

• wolfSSL/wolfssl#10222 · Issue Tracking
• wolfssl.com/docs/security-vulnerabilities · Vendor Advisory

wolfssl のその他の脆弱性

• CVE-2026-94417中 5.3When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for…
• CVE-2026-93304低 3.7A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at tha…
• CVE-2026-93302高 8.2MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macr…
• CVE-2026-89135中 6.5A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in e…
• CVE-2026-89134緊急 9.1A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constra…