Month: July 2026

Information published. Continue reading CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name→

Information published. Continue reading CVE-2026-7511 PKCS7_verify signer confusion allows forged signatures to be accepted→

Information published. Continue reading CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input→

Information published. Continue reading CVE-2026-6331 HMAC zero-length tag forgery in EVP_DigestVerifyFinal→

Information published. Continue reading CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData→

Information published. Continue reading CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info→

Information published. Continue reading CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer→

Information published. Continue reading CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length→