Skip to content

CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2026-6092

Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-06-25
Updated: 2026-06-26
Assigning organization: wolfSSL

Description

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wolfSSL wolfSSL

Default version status: unaffected

5.2.0 to ≤ 5.9.1affected

References