CVE-2026-25832
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.
Scoring
- Severity
- LOW
- CVSS base score
- 3.7
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- EPSS probability
- 0.22%
- CWE
- CWE-669
- Published
- 2026-09-14
- Last modified
- 2026-09-14
Affected products
- TrustedFirmware Mbed TLS
- TrustedFirmware Mbed TLS
Weakness type
Related vulnerabilities
- CVE-2025-41660 — CODESYS Control Boot Application Replacement Enables Code Execution
- CVE-2026-25253 — OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically mak
- CVE-2025-41645 — SMA: Sunny Portal demo system privilege escalation
- CVE-2025-34158 — Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spher
- CVE-2025-67895 — Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2
- CVE-2022-30236 — A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an
- CVE-2025-62775 — Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.
- CVE-2024-38519 — yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization