Mbed TLS CVE-2026-50640

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

Jul 19, 2026 - 14:32 vuln.today

DescriptionCVE.org

Alpine Linux: mbedtls fixed in 4.1.1-r0

AnalysisAI

Mbed TLS (mbedtls), the widely-used open-source TLS/SSL library, received a security fix in Alpine Linux packaged as version 4.1.1-r0. The nature of the underlying vulnerability - its type, impact, attack surface, and affected version range - is not disclosed in the available intelligence. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Unknown

Exploit

Unknown

Impact

Unknown

Access

Unknown

Exploit

Unknown

Impact

Unknown

Vulnerability AssessmentAI

Exploitation	Exploitation conditions cannot be determined - no CVSS vector, CWE, or vulnerability description is available. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Risk cannot be reliably assessed with the data available. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	No exploit scenario can be constructed from available data. The vulnerability type, attack vector, and impact are undisclosed. …
Remediation	Alpine Linux users should upgrade the mbedtls package to version 4.1.1-r0 or later using 'apk upgrade mbedtls'. … Detailed patch versions, workarounds, and compensating controls in full report.