cve-2022-25640-exploit

Explotando CVE-2022-25640 usando scapy Ver CVE-2022-25640.ipynb. CVE-2022-25640 es una vulnerabilidad en wolfSSL anterior a 5.2. Permite que un cliente evite la autenticación mutua en las conexiones TLS 1.3...

wolfCOSE

wolfCOSE wolfCOSE es una biblioteca ligera en C que implementa CBOR RFC 8949, COSE RFC 9052/9053 y ML-DSA para COSE RFC 9964 poscuántico, utilizando wolfSSL como backend criptográfico. Características Principales Conjunto completo de mensajes RFC 9052 : los seis tipos de mensaje COSE, incluidos...

wolfssl

Biblioteca wolfSSL SSL/TLS embebida La biblioteca SSL embebida wolfSSL anteriormente CyaSSL es una biblioteca SSL/TLS ligera escrita en C ANSI y orientada a entornos embebidos, RTOS y con recursos limitados, principalmente por su pequeño tamaño, velocidad y conjunto de características. También se...

ml-kem-key-recovery

Recuperación completa de la clave a partir de una comparación parcial de Fujisaki-Okamoto en wolfSSL ML-KEM CVE-2026-6330 NEON y CVE-2026-10097 AVX2. Corregido en wolfSSL 5.9.2. El informe técnico completo se publica como Cryptology ePrint Archive, Paper 2026/1682 copia local en paper/. Véase...

wolfGuard

WolfGuard VPN 与 FIPS 140-3 加密 WolfGuard 是基于 wolfSSL FIPS 合规重构的 Linux 内核 WireGuard，最初由 Jason Donenfeld 设计并编写。用法基本相同。WolfGuard 有两个主要组件：wolfguard.ko 内核模块和 wg-fips 配置工具。wolfguard.ko 依赖于 libwolfssl.ko 内核模块，而 wg-fips 依赖于 libwolfssl.so 库 — 这些依赖项均从相同的 wolfSSL 源代码构建，分别配置为内核模块和用户库。wg-fips-quick 脚本的工作方式与...

ALPINE-CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

AZL-99756 CVE-2026-82208 affecting package curl 8.11.1-11

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

AZL-99849 CVE-2026-82208 affecting package rust 1.90.0-10

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

AZL-99798 CVE-2026-82208 affecting package mysql 8.0.46-1

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

AZL-99840 CVE-2026-82208 affecting package rust 1.75.0-30

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

CVE-2026-82208 wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

CVE-2026-82208

CVE-2026-82208 affects libcurl when built with the wolfSSL backend . When CA caching is enabled and an application uses the CURLOPT_SSL_CTX_FUNCTION callback to replace the trust store, libcurl can silently reinstall the cached store after the callback returns. As a result, a certificate that is ...

CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

EUVD-2026-72152

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

CURL-CVE-2026-82208 wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

PT-2026-84658

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description When using the wolfSSL backend with CA caching enabled, a flaw exists where the CURLOPT SSL CTX FUNCTION callback can be overridden. If this callback replaces the trust store, libcurl may...

curl: CVE-2026-82208: wolfSSL CA-cache hit overrides callback

Summary With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, curl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then...