CVE-2026-25834

ADVISORY - nist

Summary

Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.

EPSS Score⁠: 0.00135 (0.034)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-295⁠

Improper Certificate Validation

CWE-327⁠

Use of a Broken or Risky Cryptographic Algorithm

ADVISORY - redhat

CWE-358⁠

Improperly Implemented Security Check for Standard

Impacted images

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.