CVE-2026-81341

Name of the Vulnerable Software and Affected Versions wolfEngine versions prior to 1.4.1

Description wolfEngine incorrectly sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of using the TLS sequence number within the additional authenticated data. Since the record layer leaves the explicit-nonce field for the cipher to populate, the value remains constant across records. This results in every AES-CCM record within a connection being encrypted using an identical key and nonce pair. Reusing a CCM key and nonce compromises confidentiality, as an identical keystream is used across records, and weakens integrity by allowing authentication tag forgery. This issue only affects wolfEngine when AES-CCM cipher suites are explicitly selected, as they are not enabled by default.

Recommendations Update wolfEngine to version 1.4.1 or later. As a temporary mitigation, avoid explicitly selecting AES-CCM cipher suites.