VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 25, 2026· Updated Jun 26, 2026

CVE-2026-6091

CVE-2026-6091

Description

Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an intermediate they control and have it accepted as valid. This affects the OpenSSL compatibility certificate-path-building path (wolfSSL_X509_verify_cert / X509_STORE, OPENSSL_EXTRA) when the X509_V_FLAG_PARTIAL_CHAIN verify flag is enabled.

Affected products

2
  • WolfSSL/Wolfssl2 versions
    cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*range: >=5.7.4,<5.9.2
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

1