https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:16:54.544299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-21723 cnvd-2026-21723 2026-10-03T03:16:54.720956+00:00 cnvd-2026-21723 https://cve.radiocsirt.org/vuln/euvd-2026-277401 EUVD-2026-277401 2026-10-03T03:16:54.720994+00:00 EUVD-2026-277401 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3849 fkie_cve-2026-3849 2026-10-03T03:16:54.721010+00:00

Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client program crash. This could be exploited by a malicious TLS server supporting ECH. Note that ECH is off by default, and is only enabled with enable-ech.

 https://cve.radiocsirt.org/vuln/ghsa-267h-vrw9-53p3 GHSA-267h-vrw9-53p3 2026-10-03T03:16:54.721041+00:00

Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client program crash. This could be exploited by a malicious TLS server supporting ECH. Note that ECH is off by default, and is only enabled with enable-ech.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3849 msrc_CVE-2026-3849 — Buffer Overflow in HPKE via Oversized ECH Config 2026-10-03T03:16:54.721059+00:00 msrc_CVE-2026-3849 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3849 UBUNTU-CVE-2026-3849 2026-10-03T03:16:54.721076+00:00

Affected: Ubuntu:16.04:LTS: wolfssl, Ubuntu:18.04:LTS: wolfssl, Ubuntu:20.04:LTS: wolfssl, Ubuntu:22.04:LTS: wolfssl, Ubuntu:24.04:LTS: wolfssl, Ubuntu:25.10: wolfssl, Ubuntu:26.04:LTS: wolfssl

Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client program crash. This could be exploited by a malicious TLS server supporting ECH. Note that ECH is off by default, and is only enabled with enable-ech.