PT-2026-29578 · Arm · Mbed Tls

M. Heuft · Publicado 2026-04-01 · Atualizado 2026-06-02 · CVE-2026-25834

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Mbed TLS versões 3.3.0 até 3.6.5 e versão 4.0.0

Description O software Mbed TLS contém uma falha relacionada à Rebaixamento de Algoritmo.

Recommendations Atualize para uma versão posterior a 3.6.5. Atualize para uma versão posterior a 4.0.0.

Correção

Improper Certificate Validation

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-295

CWE-327

Identificadores relacionados

CVE-2026-25834

OPENSUSE-SU-2026:10498-1

SUSE-SU-2026:22016-1

Produtos afetados

Mbed Tls

Referências · 27

• https://ubuntu.com/security/CVE-2026-25834 · Aviso do Fabricante
• https://mbed-tls.readthedocs.io/en/latest/security-advisories · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-25834 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-25834 · Aviso do Fabricante
• https://bugzilla.suse.com/1261469 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-25834 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-25834 · Nota
• https://bugzilla.suse.com/1261478 · Nota
• https://bugzilla.suse.com/1261477 · Nota
• https://suse.com/security/cve/CVE-2026-34876 · Nota
• https://suse.com/security/cve/CVE-2026-34871 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2026:10498-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-34874 · Nota
• https://suse.com/security/cve/CVE-2026-25833 · Nota
• https://cve.org/CVERecord?id=CVE-2026-25834 · Nota de Segurança