Skip to content
Heist/ feed
Back to feed
UnratedFix available

wolfSSL Release 5.9.2

Type: patchSources: wolfSSL

wolfSSL 5.9.2 fixes numerous security vulnerabilities across certificate verification, TLS/DTLS, cryptographic operations, and compatibility APIs. Fixes apply to the listed configurations and features; some vulnerabilities were already fixed in earlier releases.

Products
wolfSSL
Affected versions
5.9.0 and earlier, v5.7.4 through v5.9.1, v5.8.4, v5.9.0 and v5.9.1
Fixed versions
5.9.2
CVEs
CVE-2026-10097, CVE-2026-10098, CVE-2026-10512, CVE-2026-10592, CVE-2026-11310, CVE-2026-11703, CVE-2026-11999, CVE-2026-12340, CVE-2026-55958, CVE-2026-55960, CVE-2026-55961, CVE-2026-55962, CVE-2026-55964, CVE-2026-55967, CVE-2026-6091, CVE-2026-6092, CVE-2026-6094, CVE-2026-6291, CVE-2026-6325, CVE-2026-6329, CVE-2026-6330, CVE-2026-6331, CVE-2026-6412, CVE-2026-6450, CVE-2026-6678, CVE-2026-6679, CVE-2026-6681, CVE-2026-6731, CVE-2026-7511, CVE-2026-7531, CVE-2026-7532, CVE-2026-8720
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 19:26 UTC · Revision 1

Source evidence

wolfSSL Release 5.9.2

github-wolfssl-wolfssl · Original source

Published 25 Jun 2026, 20:04 UTC

wolfSSL 5.9.2 fixes numerous security vulnerabilities across certificate verification, TLS/DTLS, cryptographic operations, and compatibility APIs. Fixes apply to the listed configurations and features; some vulnerabilities were already fixed in earlier releases.

wolfSSL Release 5.9.2 (June 23, 2026)

wolfSSL

Fixed versions: 5.9.2

Prerequisites: --enable-opensslextra (OPENSSL_EXTRA); DTLS 1.3; HAVE_RPK

Complete source record
{
  "id": "85e1b41d4015182bb230554f247b45cb8d85f00fb17bd33ec3e9f3e3bc03c190",
  "url": "https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.2-stable",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "wolfSSL Release 5.9.2",
    "summary": "wolfSSL 5.9.2 fixes numerous security vulnerabilities across certificate verification, TLS/DTLS, cryptographic operations, and compatibility APIs. Fixes apply to the listed configurations and features; some vulnerabilities were already fixed in earlier releases.",
    "evidence": "wolfSSL Release 5.9.2 (June 23, 2026)",
    "products": [
      {
        "name": {
          "value": "wolfSSL",
          "evidence": "wolfSSL Release 5.9.2"
        },
        "prerequisites": [
          {
            "value": "--enable-opensslextra (OPENSSL_EXTRA)",
            "evidence": "This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and whose application validates certificates by calling X509_verify_cert()"
          },
          {
            "value": "DTLS 1.3",
            "evidence": "This affects builds using DTLS 1.3 and wolfSSL version 5.9.0 and earlier."
          },
          {
            "value": "HAVE_RPK",
            "evidence": "Only affects builds with Raw Public Key support (HAVE_RPK) enabled"
          }
        ],
        "fixed_versions": [
          {
            "value": "5.9.2",
            "evidence": "wolfSSL Release 5.9.2 (June 23, 2026)"
          }
        ],
        "affected_versions": [
          {
            "value": "v5.8.4, v5.9.0 and v5.9.1",
            "evidence": "Affected: v5.8.4, v5.9.0 and v5.9.1 (introduced by commit 025dbc3); v5.8.2 and earlier are not."
          },
          {
            "value": "v5.7.4 through v5.9.1",
            "evidence": "Affected versions: v5.7.4 through v5.9.1, introduced in commit 17c9e92 (first released in v5.7.4); v5.7.2 and earlier are not affected."
          },
          {
            "value": "5.9.0 and earlier",
            "evidence": "This affects builds using DTLS 1.3 and wolfSSL version 5.9.0 and earlier."
          },
          {
            "value": "5.9.0 and earlier",
            "evidence": "This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release."
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-11310",
        "evidence": "[High] CVE-2026-11310"
      },
      {
        "value": "CVE-2026-11999",
        "evidence": "[High] CVE-2026-11999"
      },
      {
        "value": "CVE-2026-6679",
        "evidence": "[High] CVE-2026-6679"
      },
      {
        "value": "CVE-2026-55958",
        "evidence": "[High] CVE-2026-55958"
      },
      {
        "value": "CVE-2026-55960",
        "evidence": "[High] CVE-2026-55960"
      },
      {
        "value": "CVE-2026-55961",
        "evidence": "[High] CVE-2026-55961"
      },
      {
        "value": "CVE-2026-6731",
        "evidence": "[Med] CVE-2026-6731"
      },
      {
        "value": "CVE-2026-6091",
        "evidence": "[Med] CVE-2026-6091"
      },
      {
        "value": "CVE-2026-6094",
        "evidence": "[Med] CVE-2026-6094"
      },
      {
        "value": "CVE-2026-6329",
        "evidence": "[Med] CVE-2026-6329"
      },
      {
        "value": "CVE-2026-6330",
        "evidence": "[Med] CVE-2026-6330"
      },
      {
        "value": "CVE-2026-8720",
        "evidence": "[Med] CVE-2026-8720"
      },
      {
        "value": "CVE-2026-10097",
        "evidence": "[Med] CVE-2026-10097"
      },
      {
        "value": "CVE-2026-10098",
        "evidence": "[Med] CVE-2026-10098"
      },
      {
        "value": "CVE-2026-10592",
        "evidence": "[Med] CVE-2026-10592"
      },
      {
        "value": "CVE-2026-7532",
        "evidence": "[Med] CVE-2026-7532"
      },
      {
        "value": "CVE-2026-6291",
        "evidence": "[Med] CVE-2026-6291"
      },
      {
        "value": "CVE-2026-7511",
        "evidence": "[Med] CVE-2026-7511"
      },
      {
        "value": "CVE-2026-11703",
        "evidence": "[Med] CVE-2026-11703"
      },
      {
        "value": "CVE-2026-55962",
        "evidence": "[Med] CVE-2026-55962"
      },
      {
        "value": "CVE-2026-55964",
        "evidence": "[Med] CVE-2026-55964"
      },
      {
        "value": "CVE-2026-6092",
        "evidence": "[Low] CVE-2026-6092"
      },
      {
        "value": "CVE-2026-6331",
        "evidence": "[Low] CVE-2026-6331"
      },
      {
        "value": "CVE-2026-6681",
        "evidence": "[Low] CVE-2026-6681"
      },
      {
        "value": "CVE-2026-10512",
        "evidence": "[Low] CVE-2026-10512"
      },
      {
        "value": "CVE-2026-6678",
        "evidence": "[Low] CVE-2026-6678"
      },
      {
        "value": "CVE-2026-7531",
        "evidence": "[Low] CVE-2026-7531"
      },
      {
        "value": "CVE-2026-6325",
        "evidence": "[Low] CVE-2026-6325"
      },
      {
        "value": "CVE-2026-6412",
        "evidence": "[Low] CVE-2026-6412"
      },
      {
        "value": "CVE-2026-6450",
        "evidence": "[Low] CVE-2026-6450"
      },
      {
        "value": "CVE-2026-12340",
        "evidence": "[Low] CVE-2026-12340"
      },
      {
        "value": "CVE-2026-55967",
        "evidence": "[Low] CVE-2026-55967"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-wolfssl-wolfssl",
  "document_id": 22924,
  "published_at": "2026-06-25T20:04:11+00:00"
}