CVE-2022-25640

creationtimestamp| type| source ---|---|--- 2022-02-24 18:21:42+00:00| seen| https://t.me/cibsecurity/38024 2023-01-17 10:37:08+00:00| seen| https://t.me/techb0ltGenona/3521 2026-09-18 04:00:06+00:00| published-proof-of-concept| Telegram/f4JrGHtkqt0dCR-QPLTbBys3Bbei0cnrbfRr-g9w7f14I 2026-09-19...

CVE-2022-25640

CVE-2022-25640 affects wolfSSL prior to 5.2.0 where a TLS 1.3 server cannot properly enforce mutual authentication; a client can omit certificate_verify and avoid presenting a certificate. Impact described across sources as enabling bypass of mutual auth during TLS 1.3 handshakes. Affected compon...

CVE-2022-25640

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificateverify message from the handshake, and never present a certificate...