Wolfssl Inc. Wolfengine

2 CVEs affecting Wolfssl Inc. Wolfengine. Latest disclosed: 2026-08-28. Critical: 0, High: 1.

Top CVEs affecting Wolfssl Inc. Wolfengine
CVESeverityScorePublishedSummary
CVE-2026-81020High7.42026-08-28wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TL…
CVE-2026-81341Medium6.52026-08-28wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number car…