CVE-2026-89135

The wolfSSL library, versions 5.8.4 through 5.9.2 , is vulnerable to a flaw where a failed X509_verify_cert call permanently installs an unverified attacker Certificate Authority (CA) into the shared CertManager . This allows an attacker to bypass certificate validation across various consumers, ...