Alertas de Seguridad de la Información

Y Alto vulnerabilidad

10/07/2026

[CVE-2026-54919] cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed T…

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIB_MBEDTLS_SUPPORT or CPPHTTPLIB_WOLFSSL_SUPPORT and a client connects to an IP-literal host with server certificate verification enabled, SSLClient and Clie…

nvdaltovulnerabilidad CVSS 7.4 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-6331] HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as …

HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC verification. In the OpenSSL-compatibility HMAC verify path the supplied signature length was only checked as not exceeding the MAC length, so a zero-length or otherwise truncated tag could pass verification. The fix requires the supplied tag length to exactly equal the MAC length …

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-7511] PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature…

PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted.

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-7532] iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constrain…

iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP address constraints.

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-8720] wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the bloc…

wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the accumulated message data, so the resulting MAC depended only on the key and not on the message being authen…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-6325] Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, …

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-11703] Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding c…

Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual hosts, carry the cached peer-authentication state into a context it was not established for. Resumption n…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-6679] A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer…

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This affects builds using DTLS 1.3 and wolfSSL version 5.9.0 and earlier. A fix was added to the 5.9.1 relea…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-6731] X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certific…

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

nvdaltovulnerabilidad CVSS 7.5 NVD

W Crítico vulnerabilidad

25/06/2026

[CVE-2026-7531] Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-546…

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 (released in 5.9.1): a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory.

nvdcriticovulnerabilidad CVSS 9.8 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-55958] Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capaci…

Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but fails to return, so execution falls through to an XMEMCPY that writes past the end of the buffer once the accumulated TLS 1.3 handshake transcript exceeds MSGBAG_SIZE (8 KB), corrupting adjacent heap state and potentially c…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-55960] Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain v…

Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative() accepts it without performing any trust verification; it must therefore only be accepted when RPK was actually negotiated for that peer. The check now defaults the expected type to X.509 (per RFC 7250/8446) when no type was negotiated,…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-10097] wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphe…

wolfSSL's AVX2-optimized ML-KEM implementation (mlkem_cmp_avx2) compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertexts that differ from the expected re-encryption solely in bytes 1536-1567 bypass implicit rejection and are accepted as valid, breaking IND-CCA2 security. An attacker able to submit chosen ciphertexts t…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-10512] The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final m…

The X25519 x86_64 assembly implementation fails to clear the most significant bit during the final modular reduction, so the computed result may not be fully reduced modulo the field prime 2^255 - 19. This can leave the field element in a non-canonical form, producing an incorrect result from the scalar multiplication and potentially a wrong shared secret. The final carry-propagation chains in the…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-11310] X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert…

X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and whose application validates certificates by calling X509_verify_cert() with caller-supplied untrusted intermediate certificates; for those users it is critical, otherwise the library is unaffected. In particular, native wol…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-12340] Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificat…

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65 bytes results in an out-of-bounds heap read, leading to a potential crash (denial of service); there is …

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-55961] wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains n…

wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer. Such an object has empty signerInfos, so the underlying signed-data verification succeeds without authenticating any content. The compatibility-layer verify path now rejects the object when no signer signature has actually been verified, so a PKCS#7 carrying no valid signature is no longer…

nvdaltovulnerabilidad CVSS 7.5 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-55967] AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were no…

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

nvdaltovulnerabilidad CVSS 7.5 NVD

W Crítico vulnerabilidad

25/06/2026

[CVE-2026-6094] Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This …

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

nvdcriticovulnerabilidad CVSS 9.1 NVD

W Alto vulnerabilidad

25/06/2026

[CVE-2026-11999] X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (…

X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra whose application calls X509_verify_cert() with caller-supplied untrusted intermediates; for those users it is critical, otherwise the library is unaffected. Native wolfSSL TLS/DTLS usage is not impacted. X509_verify_ce…

nvdaltovulnerabilidad CVSS 7.5 NVD