CRL Critical Extension Bypass in wolfSSL

CVE-2026-6450

What is CVE-2026-6450?

A vulnerability exists in wolfSSL where the critical enforcement of Certificate Revocation Lists (CRLs) is improperly handled, allowing a specially crafted CRL with an unprocessed critical extension to be accepted. This issue specifically affects builds of wolfSSL that have CRL support enabled and where a crafted CRL carries a valid trusted signature during the parsing process. This could potentially allow attackers to exploit this bypass, leading to unauthorized access or validation of revoked certificates.

References