Home Tools CVE CVE-2026-6092
MEDIUM

CVE-2026-6092

Wolfssl Wolfssl 2026-06-25 CVSS v3.1
CVSS
5.3

Description

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

Weakness (CWE)

CWE-757

EPSS Score

0.38%
Probability of exploitation in next 30 days
32.3th percentile

References

https://github.com/wolfSSL/wolfssl/pull/10167 Issue Tracking, Patch https://www.wolfssl.com/docs/security-vulnerabilities/ Vendor Advisory
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE