CVE-2026-34873

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2026-04-01

Last modified

2026-04-02

Weaknesses

CWE-287

Affected products

• Mbed Tls (Trustedfirmware)

References

• https://mbed-tls.readthedocs.io/en/latest/security-advisories/
• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-client-impersonation-wh…