CVE Explorer
CVE-2026-8720
wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the accumulated message data, so the resulting MAC depended only on the key and not on the message being authenticated. This bug is specific to the HMAC-BLAKE2 APIs that were added in wolfSSL version 5.9.0.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"collectionURL":"https://github.com/wolfSSL/wolfssl","defaultStatus":"unaffected","product":"wolfSSL","vendor":"wolfSSL","versions":[{"lessThanOrEqual":"5.9.1","status":"affected","version":"5.9.0","versionType":"semver"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:354219f9e304bc3c3457f8ab26069ffcc9c537c799d988185e012dec1bc123fa · sha256:0cf914f3770401cf… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","baseScore":5.9,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact…
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:354219f9e304bc3c3457f8ab26069ffcc9c537c799d988185e012dec1bc123fa · sha256:0cf914f3770401cf… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-354","description":"CWE-354 Improper Validation of Integrity Check Value","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:354219f9e304bc3c3457f8ab26069ffcc9c537c799d988185e012dec1bc123fa · sha256:0cf914f3770401cf… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"tags":["patch"],"url":"https://github.com/wolfSSL/wolfssl/pull/10447"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:354219f9e304bc3c3457f8ab26069ffcc9c537c799d988185e012dec1bc123fa · sha256:0cf914f3770401cf… · /containers/cna/references/0
{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:354219f9e304bc3c3457f8ab26069ffcc9c537c799d988185e012dec1bc123fa · sha256:0cf914f3770401cf… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.