Veille CVE

Mercredi 1 juillet 2026

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « wolfSSL » ✕
  1. CVE-2026-7532 7.5 Élevée

    wolfSSL · Wolfssl wolfssl

    iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP address constraints.

  2. CVE-2026-6678 5.3 Moyenne

    wolfSSL · Wolfssl wolfssl

    Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handling during decryption.