CVE-2026-6412

Certificate policy and RFC 8446 compliance concerns regarding the continued acceptance of SHA-1/MD5 in certificate processing.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - facts@wolfssl.com

Published

2026-06-25

Last modified

2026-06-26

Weaknesses

CWE-327

Affected products

• Wolfssl (Wolfssl)

References

• https://github.com/wolfSSL/wolfssl/pull/10222
• https://www.wolfssl.com/docs/security-vulnerabilities/