CVE-2026-13734

Zephyr RTOS's WireGuard data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c validated the anti-replay counter only after committing several peer-state mutations (endpoint roaming update, liveness timers, and keypair rotation). Because the AEAD tag authenti...