Dashboard / CVE-2026-5448

CVE-2026-5448

LOW
INFO Priority: 0.01 BB Relevance: 50/100
Published: 2026-04-10 Modified: 2026-11-11 First seen: 2026-11-11 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: None
VI: None
VA: Low

Description

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
wolfssl wolfssl < 5.9.1

References & Advisories (1)

Bug Bounty Relevance

50 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

2.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green

EPSS — Exploitation Probability

0.32%
Raw Score 0.003200
Percentile 25.4%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00320
2026-11-13
0.00320
2026-11-12
0.00320
2026-11-10
0.00320

Intelligence Sources

nvd ref →

External Links