UnratedFix available
Mbed TLS 3.6.6
Type: patchSources: Mbed TLS
Mbed TLS 3.6.6 includes security fixes for TLS session resumption, random-generator state cloning, and multiple cryptographic and memory-safety issues. The release recommends evaluating exposure and prioritizing an upgrade where applicable.
- Products
- Mbed TLS
- Affected versions
- Not specified
- Fixed versions
- 3.6.6
- CVEs
- CVE-2026-25833, CVE-2026-25834, CVE-2026-25835
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 29 Oct 2026, 05:00 UTC · Revision 1
Source evidence
Mbed TLS 3.6.6 includes security fixes for TLS session resumption, random-generator state cloning, and multiple cryptographic and memory-safety issues. The release recommends evaluating exposure and prioritizing an upgrade where applicable.
This release includes security fixes.
Mbed TLS
Fixed versions: 3.6.6
Complete source record
{
"id": "9d66468295026b99db813fe36794223880d0a0e2a7f8743862226ddea5d5062f",
"url": "https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.6",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Mbed TLS 3.6.6",
"summary": "Mbed TLS 3.6.6 includes security fixes for TLS session resumption, random-generator state cloning, and multiple cryptographic and memory-safety issues. The release recommends evaluating exposure and prioritizing an upgrade where applicable.",
"evidence": "This release includes security fixes.",
"products": [
{
"name": {
"value": "Mbed TLS",
"evidence": "Mbed TLS 3.6.6"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.6.6",
"evidence": "Mbed TLS 3.6.6"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2026-25833",
"evidence": "CVE-2026-25833"
},
{
"value": "CVE-2026-25835",
"evidence": "CVE-2026-25835"
},
{
"value": "CVE-2026-25834",
"evidence": "CVE-2026-25834"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-mbed-tls-mbedtls",
"document_id": 21727,
"published_at": "2026-04-01T11:17:37+00:00"
}