MEDIUM

CVE-2026-6450

Wolfssl Wolfssl 2026-06-25 CVSS v3.1

CVSS

5.3

Description

A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted. This only affects builds with CRL support enabled and where a crafted CRL had a trusted signature when parsed.

Weakness (CWE)

CWE-295 Improper Certificate Validation

EPSS Score

0.33%

Probability of exploitation in next 30 days

26.4th percentile

References

https://github.com/wolfSSL/wolfssl/pull/10239 Issue Tracking, Patch https://www.wolfssl.com/docs/security-vulnerabilities/ Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE