What is CVE-2025-7395?

CVE-2025-7395 is a vulnerability in Wolfssl, classified under Improper Certificate Validation. Published 2025-07-18.

Is CVE-2025-7395 known to be exploited?

9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Wolfssl

CVE-2025-7395

A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.

Vulnerability class: Improper Certificate Validation

EPSS: 0.002 (13.0th percentile) — read the EPSS interpretation.

Affected products

Wolfssl — versions 5.6.4

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

Public proof-of-concept exploits

17seetwice/1003_
17seetwice/ascon_
17seetwice/wolfssl_
ARPSyndicate/cve-scores
alukashenkov/Vulners-MCP
deepin-community/wolfssl
faojdoai324234s/wolfSSL
wolfSSL/Arduino-wolfSSL
wolfSSL/wolfssl

References

facts@wolfssl.com

Frequently asked questions

What is CVE-2025-7395?: CVE-2025-7395 is a vulnerability in Wolfssl, classified under Improper Certificate Validation. Published 2025-07-18.
Is CVE-2025-7395 known to be exploited?: 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.