CVE-2026-89136

The wolfSSL library is vulnerable to an authentication bypass when using Raw Public Key (RPK) during TLS 1.2 , TLS 1.3 , and DTLS 1.2 connections. The root cause is that the client side could accept an unsolicited server_cert_type=RawPublicKey, allowing a malicious server to bypass authentication...