Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

wolfSSL Inc. Vulnerabilities & CVE List (Nov 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-84897`wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion	Exploitation statusNot exploited	FixYes	Affected productwolfSSH	Published10/07/2026	SeverityMedium
`CVE-2026-83742`wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms	Exploitation statusNot exploited	FixYes	Affected productwolfSSH	Published
`CVE-2026-81535`wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check	Exploitation statusNot exploited	FixYes	Affected productwolfSSH	Published
`CVE-2026-16516`wolfSSH ECDSA host key curve not validated against negotiated algorithm	Exploitation statusNot exploited	FixYes	Affected productwolfSSH	Published
`CVE-2026-81341`wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records	Exploitation statusNot exploited	FixYes	Affected productwolfEngine	Published
`CVE-2026-81020`wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record	Exploitation statusNot exploited	FixYes	Affected productwolfEngine	Published
`CVE-2026-81019`wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record	Exploitation statusNot exploited	FixYes	Affected productwolfProvider	Published
`CVE-2026-3849`Buffer Overflow in HPKE via Oversized ECH Config	Exploitation statusNot exploited	FixYes	Affected productwolfSSL	Published03/19/2026
`CVE-2026-3503`Fault injection attack with ML-DSA and ML-KEM on ARM	Exploitation statusNot exploited	FixYes	Affected productwolfSSL (wolfCrypt)	Published
`CVE-2025-7844`wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow	Exploitation statusNot exploited	FixYes	Affected productwolfTPM
`CVE-2024-5288`Safe-error attack on TLS 1.3 Protocol	Exploitation statusNot exploited	FixYes	Affected productwolfSSL	Published08/27/2024
`CVE-2024-2873`User authentication bypass in wolfSSH server	Exploitation statusNot exploited	FixYes	Affected productwolfSSH	Published03/25/2024

12 Results | Page 1 of 1

Security vulnerabilities from wolfSSL Inc.

wolfSSL Inc.

Verify to analyze this security profile

How many security vulnerabilities does wolfSSL Inc. have?

Which wolfSSL Inc. product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular wolfSSL Inc. products