CVE-2026-6092

Description

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC.

References

• https://github.com/wolfSSL/wolfssl/pull/10167
• https://www.wolfssl.com/docs/security-vulnerabilities/