Is CVE-2026-5448 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2026-5448, but active exploitation has not been confirmed.

Can CVE-2026-5448 be exploited remotely?

Partially. CVE-2026-5448 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-5448?

CVE-2026-5448 has a CVSS score of 2.3 (LOW).

HOME VULNERABILITIESCVE-2026-5448

LOWPOC

CVE-2026-5448

CWE-122Published: April 10, 2026· Updated: Apr 13, 2026

2.3

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.8th

Official Description

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

NVD Source

Technical Analysis

CVE-2026-5448 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A proof-of-concept (PoC) exploit exists for CVE-2026-5448. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green