01
Zgłoś podatność związaną z cyberbezpieczeństwem naszych produktów
02
Rejestr zgłoszeń:
| Lp. | CVE ID | OPIS PODATNOŚCI | PRIORYTET | KOMENTARZ | CZAS NAPRAWY | WERSJA |
|---|---|---|---|---|---|---|
| 1 | CVE-2026-11310 | .509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with –enable-opensslextra (OPENSSL_EXTRA) and whose application validates certificates by calling X509_verify_cert() with caller-supplied untrusted intermediate certificates; for those users it is critical, otherwise the library is unaffected. Native wolfSSL TLS/DTLS usage is not impacted. wolfSSL’s X509_verify_cert() temporarily lo | High | .509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with –enable-opensslextra (OPENSSL_EXTRA) and whose application validates certificates by calling X509_verify_cert() with caller-supplied untrusted intermediate certificates; for those users it is critical, otherwise the library is unaffected. Native wolfSSL TLS/DTLS usage is not impacted. wolfSSL’s X509_verify_cert() temporarily lo | 10 days | 5.9.2 |