CVE-2026-59106: Unauthenticated RCE Vulnerability in WolfProt interface implementation
Published Oct 26, 2026
·Updated
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
Affected Software
1 affected component
wolfSSL WolfProt
Event History
Oct 26, 2026
CVE Published
via MITRE·01:15 PM
Data Sourced
via MITRE·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require valid credentials or user interaction?
No. The vulnerability is rated as requiring no privileges and no user interaction; an unauthenticated attacker needs network access to a vulnerable service.
2
What level of access could successful exploitation provide?
An attacker could execute operating-system commands with the privileges of the affected application service. The reported impact includes high confidentiality, integrity, and availability impact.