Vendor
wolfSSL
- articles · all time
- 3
- CVEs tracked · all time
- 8
- outlets · last 12 months
- 2
Products: wolfSSH, wolfSSL
CVEs
8 CVEsCVE-2026-89136Client accepts unsolicited RawPublicKey server certificate typeCVSS8.3High–Not in KEV0.4%EPSS2articles
CVE-2026-89102OCSP stapling v2 multi accepts non-CA chain certificates as issuersCVSS8.3High–Not in KEV0.1%EPSS2articles
CVE-2026-93302Trusted peer certificate match ignores public key, allowing forged CA clonesCVSS8.3High–Not in KEV0.2%EPSS2articles
- wolfSSH flaw could let attackers pass off forged server keysSecurityOnline
- OpenSSL and WolfSSL Patch Flaws Threatening TLS AuthenticationSecurityWeek
- wolfSSL Fixes Certificate Verification Flaws Affecting IoT DevicesSecurityOnline · first in our coverage