CVE-2026-6412

Mô tả

Tham khảo

• wolfSSL/wolfssl#10222 · Issue Tracking
• wolfssl.com/docs/security-vulnerabilities · Vendor Advisory

Lỗ hổng khác của wolfssl

• CVE-2026-94417TRUNG BÌNH 5.3When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for…
• CVE-2026-93304THẤP 3.7A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at tha…
• CVE-2026-93302CAO 8.2MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macr…
• CVE-2026-89135TRUNG BÌNH 6.5A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in e…
• CVE-2026-89134NGHIÊM TRỌNG 9.1A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constra…