VULNERABILITY INTELLIGENCE
CVE-2025-7395
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-07-18
Last modified2026-06-17
Description
A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.
Weakness classification
- facts@wolfssl.com: CWE-295