wolfSSL wolfSSL vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20245
3. 20244
4. 202511
5. 202676

Newest CVEs

• CVE-2026-15442

  Heap use-after-free on read during bidirectional (D)TLS shutdown

  wolfSSL · wolfSSL

  Low2.3
• CVE-2026-89102

  OCSP stapling v2 multi accepts non-CA chain certificates as issuers

  wolfSSL · wolfSSL

  High8.3
• CVE-2026-89133

  NameConstraints not enforced across unconstrained intermediate CA

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-89134

  Subject CN name-constraint check bypassed when non-DNS SAN present

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-89135

  Failed X509_verify_cert leaves unverified CA in shared CertManager

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-89136

  Client accepts unsolicited RawPublicKey server certificate type

  wolfSSL · wolfSSL

  High8.3
• CVE-2026-93302

  Trusted peer certificate match ignores public key, allowing forged CA clones

  wolfSSL · wolfSSL

  High8.3
• CVE-2026-93304

  (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange

  wolfSSL · wolfSSL

  Medium6.3
• CVE-2026-94417

  CRL check skipped when OCSP enabled and certificate has no OCSP URL

  wolfSSL · wolfSSL

  Low2.3
• CVE-2026-94418

  Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

  wolfSSL · wolfSSL

  Low2.3