CVE-2026-11310

X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and whose application validates certificates by calling X509_verify_cert() with caller-supplied untrusted intermediate certificates; for those users it is critical, otherwise the library is unaffected. In particular, native wolfSSL TLS/DTLS usage is not impacted. wolfSSL's X509_verify_cert() temporarily loads each caller-supplied untrusted intermediate into the certificate manager but failed to drop them before the trusted-store check, so an untrusted intermediate could anchor the path itself. An attacker can present a chain that never reaches a configured trust anchor and have it accepted, resulting in acceptance of an attacker-controlled certificate. This is certificate verification independent of TLS (e.g. S/MIME/CMS, code/firmware signing, JWT/JWS x5c), is not specific to any key type or algorithm, and a single untrusted intermediate suffices. The default wolfSSL TLS handshake (WOLFSSL_VERIFY_PEER) is not affected; only TLS applications doing manual or deferred peer verification through this API are, which also requires --enable-sessioncerts.

• CWE-295

• https://github.com/wolfSSL/wolfssl/pull/10674Issue Tracking, Patch
• https://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisory

Published

Jun 25, 2026

Last Modified

Jun 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11305Use after free in PDFium in Google Chrome prior to 149.0.782…8.8
• CVE-2026-11306Use after free in PDFium in Google Chrome prior to 149.0.782…8.8
• CVE-2026-11307Use after free in PDFium in Google Chrome prior to 149.0.782…8.8
• CVE-2026-11308Inappropriate implementation in Extensions in Google Chrome …6.3
• CVE-2026-11309Insufficient policy enforcement in History in Google Chrome …4.3
• CVE-2026-1131A vulnerability has been found in Yonyou KSOA 9.0. Impacted …9.8
• CVE-2026-11311When NGINX Plus is configured as the data plane for NGINX Ga…6.5
• CVE-2026-11312A vulnerability was found in bytedance InfiniStore up to 0.2…3.3
• CVE-2026-11314Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-11317A denial of service security issue exists in the affected pr…8.7
• CVE-2026-1132A vulnerability was found in Yonyou KSOA 9.0. The affected e…9.8
• CVE-2026-11321The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) co…7.1