low3.7
CVE-2026-25832
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.
Impact
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.
Affected products
| Product | Affected versions |
|---|---|
| Mbed TLS 3.6.X | before 3.6.7 |
| 4.1.X | before 4.1.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.