Threats Tagged 'cve-2026-94418'
View all threats tagged with 'cve-2026-94418'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-94418'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-94418 is a vulnerability in wolfSSL when built with WOLFSSL_SMALL_CERT_VERIFY enabled. The certificate signature check is separated from parsing, causing signature verification errors to be hidden if parsing fails. This inversion of validation order allows an attacker to use a self-made certificate with manipulated validity dates and signatures to bypass signature checks if the application uses a verify callback that overrides date errors. The vulnerability affects TLS 1.2, TLS 1.3, and DTLS in both directions. It requires specific build options and application verify callback behavior to be exploitable. Join the discussion | GCVE Database | 09/27/2026, 09:31:10 UTC Added: 10/03/2026, 17:22:06 UTC |
Showing 1 to 1 of 1 result