CVE-2026-34871 - An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0

Back Back to CVE browser

MEDIUM

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0

Published Apr 1, 2026

6.7

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator (PRNG).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-338

References (2)

https://mbed-tls.readthedocs.io/en/latest/security-advisories/
Vendor Advisory
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-dev-random/
Vendor Advisory

Link	Providers	Tags
https://mbed-tls.readthedocs.io/en/latest/security-advisories/		Vendor Advisory
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2026-03-dev-random/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 1, 2026

Updated Apr 1, 2026

Reserved Mar 31, 2026

Link CVE-2026-34871

CISA Vulnrichment

Updated Apr 1, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-34871

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-34871