Vulnerability in Wolfssl
CVE-2026-11999
X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra whose application calls X509_verify_cert() with caller-sup…
Vulnerability class: Improper Certificate Validation
Affected products
- Wolfssl — versions 5.7.4