VulnSocial

CVE-2026-6679Disclosure(wolfssl / wolfssl)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch wolfssl wolfssl systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This affects builds using DTLS 1.3 and wolfSSL version 5.9.0 and earlier. A fix was added to the 5.9.1 release.

wolfssl CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-190CWE-197CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wolfssl

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-26); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
wolfssl
Products
wolfssl

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-26: 1Mentions · 2026-06-30: 1Patch / Workaround · 2026-06-30: 1Technical Details · 2026-06-26: 1Technical Details · 2026-06-30: 106-2606-30
Signal classification1 categories
Disclosure
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • TECHEPAGES@techepages
    Disclosure

    Multiple wolfSSL vulnerabilities expose billions of servers and IoT devices to cyberattacks 🔹 Flaws in wolfSSL's certificate verifier (CVE-2026-11310, CVE-2026-11999) allow attacker-controlled certificates to be wrongly trusted 🔹 Crafted DTLS 1.3 ACK messages can trigger heap buffer overflows, risking remote crashes or code execution (CVE-2026-6679, CVE-2026-5264) 🔹 Admins urged to upgrade to wolfSSL 5.9.1 or 5.9.2 and disable unneeded features like OpenSSL compatibility and PKCS7 support

    Post summary

    Multiple wolfSSL vulnerabilities exposing billions of devices to certificate misuse and heap overflows have been disclosed; administrators should upgrade to 5.9.1/5.9.2 and disable unnecessary features to mitigate risk.

    0000039
    22 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-6679 Heap Buffer Overflow in wolfSSL DTLS 1.3 ACK Serialization Before Version 5.9.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6679

    Post summary

    The post announces the existence of CVE-2026-6679, describing a heap buffer overflow in wolfSSL DTLS 1.3 ACK serialization prior to version 5.9.1, without providing PoC, patch, or exploitation details.

    00000117
    4.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwolfsslwolfssl---

Explore more

Back to dashboardwolfssl CVEswolfssl vulnerabilities