Skip to content
OpenAdvisories

Product · wolfSSL

wolfEngine

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-81020

    wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

    wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce …

    wolfSSL wolfEngine