Lucene search
+L

16 matches found

osv_alpine
osv_alpine
•added 2026/09/27 10:16 a.m.•10 views

ALPINE-CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.2CVSS5.9AI score0.00237EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/09/27 10:16 a.m.•49 views

DEBIAN-CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.2CVSS5.9AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/27 10:16 a.m.•22 views

CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS0.00237EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/09/27 10:16 a.m.•38 views

UBUNTU-CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/27 10:16 a.m.•18 views

CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References2
Mend
Mend
•added 2026/09/27 9:07 a.m.•17 views

CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/09/27 9:07 a.m.•32 views

CVE-2026-93302 Trusted peer certificate match ignores public key, allowing forged CA clones

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/27 9:07 a.m.•47 views

CVE-2026-93302 Trusted peer certificate match ignores public key, allowing forged CA clones

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS0.00237EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/27 9:07 a.m.•24 views

CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/09/27 9:07 a.m.•19 views

CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/27 9:07 a.m.•18 views

EUVD-2026-87910

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/27 9:07 a.m.•79 views

CVE-2026-93302

The wolfSSL library contains a vulnerability where the MatchTrustedPeer function ignores the public key during verification, allowing forged CA clones to pass. This affects builds enabling the WOLFSSL_TRUST_PEER_CERT macro and loading certificates via wolfSSL_CTX_trust_peer_cert() or wolfSSL_trus...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•15 views

CVE-2026-93302: Improper Certificate Validation

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•14 views

CVE-2026-93302: Improper Certificate Validation

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/27 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-93302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCE...

8.3CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•15 views

PT-2026-99513

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The MatchTrustedPeer function ignores the public key used, which allows forged CA clones to pass verification. This issue occurs in builds where the WOLFSSL TRUST PEER CERT macro is enabled a...

8.3CVSS5.8AI score0.00237EPSS
SaveExploits0References5
Rows per page
Query Builder