CVE-2026-13734: Zephyr Wireguard Replay Check After State Update

Peer state or endpoint address is updated before validating the anti-replay counter, allowing replayed packets to hijack roaming endpoints or disrupt session state.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-13734-zephyr-wireguard-replay-check-after-state-update --engine opengrep

Description

Peer state or endpoint address is updated before validating the anti-replay counter, allowing replayed packets to hijack roaming endpoints or disrupt session state.