CVE-2026-25834
Description
A flaw was found in Mbed TLS. A remote attacker could exploit this vulnerability by performing an algorithm downgrade attack. This could lead to a reduction in the security strength of cryptographic operations, potentially allowing for information disclosure or denial of service.
Statement
Moderate: This flaw in Mbed TLS allows a remote attacker to perform an algorithm downgrade attack, which can reduce the security strength of cryptographic operations. This could potentially lead to information disclosure or denial of service. This vulnerability affects community projects such as Fedora and EPEL.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Bypass Protection Mechanism
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
