CVE-2026-25832
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.
- Published Sep 14, 2026
- CVSS 3.7 low
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available