Vulnerability in Wolfssl

CVE-2026-11999

X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra whose application calls X509_verify_cert() with caller-sup…

Vulnerability class: Improper Certificate Validation

Affected products

Weakness classification (CWE)

References