IP Address Name Constraints Bypass in WolfSSL by WolfSSL
CVE-2026-7532

5.7MEDIUM

Key Information:

Vendor

Wolfssl

Status
Wolfssl
Vendor
CVE Published:
25 June 2026

What is CVE-2026-7532?

This vulnerability in WolfSSL occurs when the IP address name constraints are not enforced due to the configuration setting WOLFSSL_IP_ALT_NAME not being defined. As a result, it allows certificates to bypass the issuing Certificate Authority’s IP address constraints, potentially leading to security risks where unauthorized certificates can be accepted for validation. Users should ensure configurations are appropriately set to maintain security standards and prevent exploitation.

Affected Version(s)

wolfSSL 0 <= 5.9.1

References

https://github.com/wolfSSL/wolfssl/pull/10354
patch
https://www.wolfssl.com/docs/security-vulnerabilities/

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ankur Tyagi of Cisco Talos (TALOS-2026-2409)
.