WI
Vendor security profile
wolfSSL Inc.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical1
CISA KEV0
Public exploit0
Patch rate%57
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
0
4
CVE KEV
CVE severity distribution
7toplam CVE
Critical1 (14%)
High2 (29%)
Medium4 (57%)
Patch and exploitation view
%57
Verified patch
%0
CISA KEV
%0
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
6.9
CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
WI
Patch verifiedEPSS %0
5.3
CVE-2026-83742
wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
WI
Patch verifiedEPSS %0
6.3
CVE-2026-81535
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
WI
Patch verifiedEPSS %0
9.0
CVE-2026-16516
wolfSSH ECDSA host key curve not validated against negotiated algorithm
WI
Patch verifiedEPSS %0
6.5
CVE-2026-81341
wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
WI
Patch status unknownEPSS %0
7.4
CVE-2026-81020
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
7.4
CVE-2026-81019
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0