High severity7.5NVD Advisory· Published Jun 25, 2026· Updated Jul 1, 2026

CVE-2026-7532

Description

iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP address constraints.

Affected products

WolfSSL/Wolfsslllm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*range: <5.9.2
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/wolfSSL/wolfssl/pull/10354nvdIssue TrackingPatch
www.wolfssl.com/docs/security-vulnerabilities/nvdVendor Advisory
www.talosintelligence.com/vulnerability_reports/TALOS-2026-2409nvd

News mentions

WolfSSL: Ten Vulnerabilities Disclosed Together Affecting Crypto and Certificate Handling
Vypr Intelligence · Jun 26, 2026

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000