wolfSSL

Records177All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high44CVSS 7.0–8.9

Exploited now

wolfSSL records in CISA KEV

No wolfSSL vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wolfssl 151 records HIGH Wolfmqtt 7 records LOW Wolfengine 2 records LOW Wolfprovider 1 record LOW Yassl 1 record HIGH

Records

2 records in Wolfengine · all components

TI-2026-56033 CVE-2026-81020 · GHSA-8x67-443h-6cwx

wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

LOW 35

wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00383 Published 2026-08-28 No fix listed CWE-323

TI-2026-56159 CVE-2026-81341 · GHSA-vf9h-5c79-c2xp

wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

LOW 29

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00318 Published 2026-08-28 No fix listed CWE-323

Open these records in search →

Critical	23
High	44
Medium	73
Low	37
No CVSS	0