W
Vendor security profile
wolfssl
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs19
Critical0
CISA KEV0
Public exploit0
Patch rate%58
Avg. CVSS6.0
12-month vulnerability rate
1
0
0
0
0
1
0
2
0
3
11
1
CVE KEV
CVE severity distribution
19toplam CVE
High7 (37%)
Medium8 (42%)
Low4 (21%)
Patch and exploitation view
%58
Verified patch
%0
CISA KEV
%0
Public exploit
11Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
6.9
CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
WI
Patch verifiedEPSS %0
5.3
CVE-2026-83742
wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
WI
Patch verifiedEPSS %0
7.7
CVE-2026-83540
wolfSSHd on Windows race condition leading to logon token reused across connections
W
Patch verifiedEPSS %0
6.3
CVE-2026-81535
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
WI
Patch verifiedEPSS %0
9.0
CVE-2026-16516
wolfSSH ECDSA host key curve not validated against negotiated algorithm
WI
Patch verifiedEPSS %0
2.3
CVE-2026-15442
Heap use-after-free on read during bidirectional (D)TLS shutdown
W
Patch status unknownEPSS %0
8.3
CVE-2026-89102
OCSP stapling v2 multi accepts non-CA chain certificates as issuers
W
Patch verifiedEPSS %0
6.3
CVE-2026-89133
NameConstraints not enforced across unconstrained intermediate CA
W
Patch status unknownEPSS %0
6.3
CVE-2026-89134
Subject CN name-constraint check bypassed when non-DNS SAN present
W
Patch verifiedEPSS %0
6.3
CVE-2026-89135
Failed X509_verify_cert leaves unverified CA in shared CertManager
W
Patch verifiedEPSS %0