CVE-2026-25832 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
mitre	CNA	3.7 LOW	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
trustedfirmware	mbed_tls	3.5.0 ≤ 𝑥 < 3.6.7	CNA
trustedfirmware	mbed_tls	4.0.0 ≤ 𝑥 < 4.1.2	CNA

Debian Releases

Debian Product

Codename

mbedtls

bookworm	vulnerable
forky	3.6.7-3 fixed
sid	3.6.7-3 fixed
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

mbedtls

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-669 - Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References

https://mbed-tls.readthedocs.io/en/latest/security-advisories/

https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-07-tls13-hrr-unadvertised-group/