CVE-2026-89136
Client accepts unsolicited RawPublicKey server certificate type
CVSS score
8.3
EPSS probability
%0.6
Risk score
0.0
Published
16 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.4
CVE-2026-81020
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
7.4
CVE-2026-81019
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
6.5
CVE-2025-11933
Improper input validation in Wolfssl
W
Patch verifiedEPSS %0
7.7
CVE-2026-83540
wolfSSHd on Windows race condition leading to logon token reused across connections
W
Patch verifiedEPSS %0
7.5
CVE-2026-7532
Improper certificate validation in Wolfssl
W
Patch verifiedEPSS %0
6.5
CVE-2026-81341
wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
WI
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-89136"