A vulnerability marked as problematic has been reported in mbed TLS up to 3.6.5/4.0.x. The impacted element is an unknown function. This manipulation causes insufficient entropy in prng.

This vulnerability is tracked as CVE-2026-34871. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.