CVE-2026-55962

TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, but it was also being applied while a post-handshake CertificateRequest was still outstanding. The check is now scoped to the initial handshake only: on the server, once a post-handshake CertificateRequest has been sent (certReqCtx is set), a peer certificate and a valid CertificateVerify are required again before the Finished is accepted, with empty-certificate handling following the configured verify mode (FAIL_IF_NO_PEER_CERT) just as during first-handshake client authentication. Only affects TLS 1.3 servers built with post-handshake authentication support (WOLFSSL_POST_HANDSHAKE_AUTH / --enable-postauth, included in --enable-all) that enable WOLFSSL_VERIFY_POST_HANDSHAKE and request a client certificate after the handshake via wolfSSL_request_certificate(). Clients, and servers that do not use post-handshake authentication, are unaffected.

• CWE-287

• https://github.com/wolfSSL/wolfssl/pull/10702Issue Tracking, Patch
• https://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisory

Published

Jun 25, 2026

Last Modified

Jun 27, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55956Improper Authorization vulnerability in Apache Tomcat leads …6.5
• CVE-2026-55957Missing Critical Step in Authentication vulnerability in Apa…7.3
• CVE-2026-55958Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript b…7.5
• CVE-2026-5596A vulnerability was detected in griptape-ai griptape 0.19.4.…6.3
• CVE-2026-55960Un-negotiated Raw Public Key (RFC 7250) accepted in place of…7.5
• CVE-2026-55961wolfSSL_PKCS7_verify() returning success for a degenerate (c…7.5
• CVE-2026-55964Chain intermediate CA:TRUE without keyCertSign accepted as a…5.3
• CVE-2026-55967AES-GCM encryption/decryption with extremely large cumulativ…7.5
• CVE-2026-55968Inefficient Algorithmic Complexity, Allocation of Resources …7.5
• CVE-2026-55969Integer Overflow or Wraparound vulnerability in Apache Thrif…7.5
• CVE-2026-5597A flaw has been found in griptape-ai griptape 0.19.4. This a…6.3
• CVE-2026-55970Buffer Over-read vulnerability in Apache Thrift C++ bindings…6.5