CVE-2026-10592: wolfSSL

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

Affected products

• wolfSSL wolfSSL: from 3.9.10, before 5.9.2 (fixed in 5.9.2)

Published 2026-06-25. Last modified 2026-06-26.