← Database

CVE-2026-34873

CRITICAL CVSS: 9.1 Published: 2026-04-01 Modified: 2026-06-17

Description

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.

Affected Platforms

Trustedfirmware Mbed Tls

Weakness Type

CWE-287

References