CVE-2026-5188Disclosure(wolfssl / wolfssl)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect handling of certificate data. The issue is limited to configurations using the original ASN.1 parsing implementation which is off by default.

wolfssl CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/wolfSSL/wolfssl/pull/10024

Weakness type (CWE)

CWE-191

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

wolfssl

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 1d ago at 3 mentions (2026-04-10); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

wolfssl

Products

wolfssl

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-10	3	Disclosure2General1
2026-04-11	1	General1

Full discourse4 posts

CVEarity@CVEarity180d
General
⚡ New CVE Alert: CVE-2026-5188 📊 Severity: 2.3 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5188 #CVE-2026-5188 #CVE #Low #CyberSecurity #InfoSec https://t.co/cBonihLBeh
Post summary
The tweet announces a low‑severity CVE with minimal information and no additional technical or exploitation details.
0000034
125 followersView on X
CVE@CVEnew181d
Disclosure
CVE-2026-5188 An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate can specify an ent… https://www.cve.org/CVERecord?id=CVE-2026-5188
Post summary
The post announces CVE‑2026‑5188, describing an integer underflow in wolfSSL’s SAN parsing, but offers no evidence of exploitation, patches, or PoC.
00000102
57.0K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds181d
General
CVE-2026-5188 Integer Underflow in wolfSSL X.509 Subject Alternative Name Extension Parsing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5188
Post summary
The message cites CVE‑2026‑5188 as an integer underflow vulnerability in wolfSSL’s X.509 SAN parsing, but lacks details on PoC, exploitation, or remediation.
0000040
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash182d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5188 - Integer underflow in X.509 SAN parsing in wolfSSL Intel Report: https://ift.tt/I3miksP
Post summary
The tweet alerts to CVE‑2026‑5188, describing it as an integer underflow in X.509 SAN parsing within wolfSSL, but provides no evidence of active exploitation, PoCs, or patches.
0000029
280 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wolfssl	wolfssl	-	-	-

Explore more

Back to dashboard wolfssl CVEs wolfssl vulnerabilities

What researchers are saying

CVE-2026-5188

CVEarity@CVEarityGeneral

The tweet announces a low‑severity CVE with minimal information and no additional technical or exploitation details.

CVE@CVEnewDisclosure

The post announces CVE‑2026‑5188, describing an integer underflow in wolfSSL’s SAN parsing, but offers no evidence of exploitation, patches, or PoC.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The message cites CVE‑2026‑5188 as an integer underflow vulnerability in wolfSSL’s X.509 SAN parsing, but lacks details on PoC, exploitation, or remediation.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The tweet alerts to CVE‑2026‑5188, describing it as an integer underflow in X.509 SAN parsing within wolfSSL, but provides no evidence of active exploitation, PoCs, or patches.