CVE-2026-25834

Red Hat statement

Moderate: This flaw in Mbed TLS allows a remote attacker to perform an algorithm downgrade attack, which can reduce the security strength of cryptographic operations. This could potentially lead to information disclosure or denial of service. This vulnerability affects community projects such as Fedora and EPEL.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.