{"uuid": "a278955c-ecd4-4911-ab80-dcb0098dae0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89135", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwxtnpotuq2l", "content": "New MEDIUM CVE for wolfSSL: CVE-2026-89135\n\nA failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer (native TLS, OCSP, CRL, d\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-89135", "creation_timestamp": "2026-10-03T12:01:07.246799Z"}