Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails to verify the authentication tag before returning plaintext to the caller. When an application uses the EVP API to perform ChaCha20-Poly1305 decryption, the implementation computes or accepts the tag but does not compare it against the expected value.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-10 | 2 | Disclosure2 |
| 2026-04-11 | 1 | General1 |
CVE-2026-5479 In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails to verify the authen… https://www.cve.org/CVERecord?id=CVE-2026-5479
Post summary
The text discloses a missing authentication verification in wolfSSL's ChaCha20-Poly1305 decryption path, indicating a potential vulnerability without additional exploitation or patch details.
⚡ New CVE Alert: CVE-2026-5479 📊 Severity: 7.6 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5479 #CVE-2026-5479 #CVE #High #CyberSecurity #InfoSec https://t.co/mIDl4Ctms3
Post summary
The tweet merely announces CVE-2026-5479 with basic severity information and a link to the NVD entry, lacking any deeper technical or exploit details.
CVE-2026-5479 Authentication Tag Bypass in wolfSSL EVP ChaCha20-Poly1305 AEAD Decryption https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5479
Post summary
The passage announces a CVE‑2026‑5479 authentication tag bypass in wolfSSL’s ChaCha20-Poly1305 implementation, linking to a vulnerability page, but offers no PoC, exploit details, active exploitation evidence, or mitigation steps.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |