CVE-2026-6092

Опубликовано: 25 июн. 2026

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

Конфигурация 1

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

Версия от 5.2.0 (включая) до 5.9.2 (исключая)

EPSS

Процентиль: 11%

0.00209

Низкий

5.3 Medium

CVSS3

CWE-757

CVE-2026-6092

CVSS3: 5.3

ubuntu

около 1 месяца назад

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

CVE-2026-6092

msrc

около 1 месяца назад

Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

CVE-2026-6092

CVSS3: 5.3

debian

около 1 месяца назад

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fal ...

GHSA-576m-xh9m-c774

CVSS3: 5.3

github

около 1 месяца назад

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

EPSS

Процентиль: 11%

0.00209

Низкий

5.3 Medium

CVSS3

CWE-757