https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:45:06.432753+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330357 EUVD-2026-330357 2026-10-09T18:45:06.437014+00:00 EUVD-2026-330357 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6091 fkie_cve-2026-6091 2026-10-09T18:45:06.437065+00:00

Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an intermediate they control and have it accepted as valid. This affects the OpenSSL compatibility certificate-path-building path (wolfSSL_X509_verify_cert / X509_STORE, OPENSSL_EXTRA) when the X509_V_FLAG_PARTIAL_CHAIN verify flag is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-mhq8-94h7-mrgx GHSA-mhq8-94h7-mrgx 2026-10-09T18:45:06.437120+00:00

Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an intermediate they control and have it accepted as valid. This affects the OpenSSL compatibility certificate-path-building path (wolfSSL_X509_verify_cert / X509_STORE, OPENSSL_EXTRA) when the X509_V_FLAG_PARTIAL_CHAIN verify flag is enabled.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6091 msrc_CVE-2026-6091 — Partial-chain verification accepts untrusted intermediate as trust anchor 2026-10-09T18:45:06.437157+00:00 msrc_CVE-2026-6091 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6091 UBUNTU-CVE-2026-6091 2026-10-09T18:45:06.437184+00:00

Affected: Ubuntu:16.04:LTS: wolfssl, Ubuntu:18.04:LTS: wolfssl, Ubuntu:20.04:LTS: wolfssl, Ubuntu:22.04:LTS: wolfssl, Ubuntu:24.04:LTS: wolfssl, Ubuntu:25.10: wolfssl, Ubuntu:26.04:LTS: wolfssl

Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an intermediate they control and have it accepted as valid. This affects the OpenSSL compatibility certificate-path-building path (wolfSSL_X509_verify_cert / X509_STORE, OPENSSL_EXTRA) when the X509_V_FLAG_PARTIAL_CHAIN verify flag is enabled.