CVE-2026-81019Patch(wolfssl / wolfprovider)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch wolfssl wolfprovider systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce discloses the keystream (the XOR of two ciphertexts equals the XOR of their plaintexts, so one known record recovers the others) and leaks the GHASH authentication key, enabling authentication tag forgery. AES-CCM, TLS 1.3, and non-TLS use of the cipher are not affected.

wolfssl CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.wolfssl.com/docs/security-vulnerabilities/

Weakness type (CWE)

CWE-323

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

wolfprovider

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Peaked 1d ago at 1 mentions (2026-08-28); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

wolfssl

Products

wolfprovider

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Patch

2100.0%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2026-81019

Full discourse2 posts

DFIR Lab@DFIR_Lab14d
Patch
🚨 HIGH severity CVE-2026-81019 (CVSS 7.4) affects wolfProvider <1.2.2 Critical flaw: AES-GCM nonce reuse in TLS 1.2/DTLS 1.2 enables keystream disclosure & auth tag forgery. Update to v1.2.2 immediately. #CVE #PatchNow #ThreatIntel https://t.co/BkvdVmwfGH
Post summary
The tweet discloses a high-severity vulnerability (CVE-2026-81019) with technical details and explicitly recommends updating wolfProvider to version 1.2.2 for remediation.
0000037
143 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters46d
Patch
CVE-2026-81019 - AES-GCM nonce reuse in wolfSSL wolfProvider allows TLS 1.2 decryption and auth tag forgery. CVSS 7.4. Update to 1.2.2 immediately. #CVE #wolfSSL #infosec https://www.valtersit.com/cve/CVE-2026-81019 #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #china #france #germany #docker
Post summary
The tweet announces CVE-2026-81019 involving AES‑GCM nonce reuse in wolfSSL, gives technical details, and urges immediate upgrade to version 1.2.2 to mitigate the issue.
0000072
1.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wolfssl	wolfprovider	-	-	-

Explore more

Back to dashboard wolfssl CVEs wolfprovider vulnerabilities