CVE-2026-6092

Summary

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

Affected Software

Weaknesses

• CWE-757: CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/wolfSSL/wolfssl/pull/10167
• https://www.wolfssl.com/docs/security-vulnerabilities/

• ←Previous
• Next→