WolfSSL vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20247
3. 20244
4. 202678
5. 202615

Newest CVEs

• CVE-2026-83540

  wolfSSHd on Windows race condition leading to logon token reused across connections

  wolfSSL · wolfSSH

  High7.7
• CVE-2026-15442

  Heap use-after-free on read during bidirectional (D)TLS shutdown

  wolfSSL · wolfSSL

  Low2.3
• CVE-2026-89102

  OCSP stapling v2 multi accepts non-CA chain certificates as issuers

  wolfSSL · wolfSSL

  High8.3
• CVE-2026-89133

  NameConstraints not enforced across unconstrained intermediate CA

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-89134

  Subject CN name-constraint check bypassed when non-DNS SAN present

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-89135

  Failed X509_verify_cert leaves unverified CA in shared CertManager

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-89136

  Client accepts unsolicited RawPublicKey server certificate type

  wolfSSL · wolfSSL

  High8.3
• CVE-2026-93302

  Trusted peer certificate match ignores public key, allowing forged CA clones

  wolfSSL · wolfSSL

  High8.3
• CVE-2026-93304

  (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-94417

  CRL check skipped when OCSP enabled and certificate has no OCSP URL

  wolfSSL · wolfSSL

  Low2.3