CVE-2026-13735 | ZephyrProject Zephyr up to 4.4.1 WireGuard wg_crypto.c wg_process_data_message receiver improper authentication

August 28, 2026 Yanac

A vulnerability has been found in ZephyrProject Zephyr up to 4.4.1 and classified as problematic. The impacted element is the function wg_process_data_message of the file subsys/net/lib/wireguard/wg_crypto.c of the component WireGuard. This manipulation of the argument receiver causes improper authentication.

This vulnerability is handled as CVE-2026-13735. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More