CVE-2026-25832

Mbed TLS versions 3.6.x prior to 3.6.7 and 4.1.x prior to 4.1.2 are vulnerable as the TLS 1.3 client can accept a HelloRetryRequest that selects an unadvertised group, potentially leading to compatibility issues or denial of service. While the severity is rated low, organizations using these specific versions should prioritize updating to mitigate any potential risks associated with improper handling of TLS negotiations.