There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460
    (released in 5.9.1): a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger
    the error cleanup path to operate on freed memory. (CVE-2026-7531)

  - Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted
    intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an
    intermediate they control and have it accepted as valid. This affects the OpenSSL compatibility
    certificate-path-building path (wolfSSL_X509_verify_cert / X509_STORE, OPENSSL_EXTRA) when the
    X509_V_FLAG_PARTIAL_CHAIN verify flag is enabled. (CVE-2026-6091)

  - When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather
    than enforcing Encrypt-then-MAC. (CVE-2026-6092)

  - Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could
    theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS. (CVE-2026-6094)

  - Bleichenbacher padding oracle in PKCS#7 KTRI decryption. When decrypting PKCS#7 EnvelopedData using RSA
    PKCS#1 v1.5 key transport, wolfSSL returned distinguishable error codes depending on whether RSA padding
    validation failed versus whether the decrypted content was malformed. An attacker able to submit crafted
    EnvelopedData messages and observe error responses could use this as a padding oracle to incrementally
    recover the encrypted Content Encryption Key (CEK). The fix generates a deterministic pseudo-random fake
    CEK on padding failure (via HMAC-SHA256) and proceeds with decryption identically, using constant-time
    operations throughout, so that all failure paths produce the same error regardless of padding validity.
    (CVE-2026-6291)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer     SingleResponse whose serial is a prefix of the target serial to be reported as the revocation status of a     different certificate. The lookup compared serial-number bytes without first requiring the two serial     numbers to be of equal length, so a SingleResponse for one certificate (same issuer) whose serial is a     prefix of the target's serial would match, returning the wrong certificate's status. The fix requires the     serial lengths to be equal before comparing the serial bytes. (CVE-2026-10098)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
474886	Alpine: multiple wolfssl packages: security update to 5.9.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/16/2026	10/16/2026	high
474886	Alpine: multiple wolfssl packages: security update to 5.9.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/16/2026	10/16/2026	high
323744	Linux Distros Unpatched Vulnerability : CVE-2026-10098	Nessus	Misc.	6/30/2026	9/7/2026	medium

Detections

Analytics

Plugins Search

high

high

medium