CVE-2026-8720
wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the accumulated message data, so the resulting MAC depended only on the key and not on the message being authenticated. This bug is specific to the HMAC-BLAKE2 APIs that were added in wolfSSL version 5.9.0.
- Affected products
- Wolfssl
- Wolfssl
- < 5.9.2
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 0.2% (5th percentile)
- Weakness
- CWE-354
- NVD status
- Analyzed
- Published
- 2026-06-25
CVE-2026-8720 at NVD
No indexed exploits for CVE-2026-8720 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-8720 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.