Logo
vulnerabilityCVE-2026-5194
Name
CVE-2026-5194
Source
NVD ( link)Debian ( link)
Description
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication if the public CA key used is also known. This affects ECDSA/ECC verification when EdDSA or ML-DSA is also enabled.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
wolfssl
Exploitable

Vulnerability Ratings#


9.3
CVSSv4
9.1
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
5.9.1
Not Affected
buildroot
master
5.9.1
Not Affected
openwrt
master
5.9.1-r1
Not Affected
openwrt
openwrt-25.12
5.9.1-r1
Not Affected
yocto
kirkstone
5.2.0
Exploitable
yocto
master
5.9.1
Not Affected