Wolfengine (Wolfssl) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-08-28. Vendor: Wolfssl.

CVEs of Wolfengine

• CVE-2026-81341 - CVSS 6.5 (medium), 2026-08-28: wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number…
• CVE-2026-81020 - CVSS 7.4 (high), 2026-08-28: wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every…