CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

CVE-2026-93302

The wolfSSL library contains a vulnerability where the MatchTrustedPeer function ignores the public key during verification, allowing forged CA clones to pass. This affects builds enabling the WOLFSSL_TRUST_PEER_CERT macro and loading certificates via wolfSSL_CTX_trust_peer_cert() or wolfSSL_trus...

PT-2026-99513

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The MatchTrustedPeer function ignores the public key used, which allows forged CA clones to pass verification. This issue occurs in builds where the WOLFSSL TRUST PEER CERT macro is enabled a...