diff --git a/security/wolfssl/Makefile b/security/wolfssl/Makefile
index a458dae3a447..375c99fd2981 100644
--- a/security/wolfssl/Makefile
+++ b/security/wolfssl/Makefile
@@ -1,70 +1,69 @@
 PORTNAME=	wolfssl
-PORTVERSION=	5.9.1
-PORTREVISION=	1
+PORTVERSION=	5.9.2
 CATEGORIES=	security devel
 MASTER_SITES=	https://www.wolfssl.com/ \
 		LOCAL/fox
 
 MAINTAINER=	fox@FreeBSD.org
 COMMENT=	Embedded SSL C-Library
 WWW=		https://www.wolfssl.com/
 
 LICENSE=	GPLv3
 LICENSE_FILE=	${WRKSRC}/COPYING
 
-USES=		cpe libtool zip autoreconf
+USES=		cpe libtool zip
 USE_LDCONFIG=	yes
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS=	--disable-dependency-tracking \
 		--enable-certgen \
 		--enable-context-extra-user-data \
 		--enable-des3 \
 		--enable-dh \
 		--enable-dsa \
 		--enable-dtls \
 		--enable-ecc \
 		--enable-haproxy \
 		--enable-ipv6 \
 		--enable-keygen \
 		--enable-opensslall \
 		--enable-opensslextra \
 		--enable-quic \
 		--enable-ripemd \
 		--enable-sessioncerts \
 		--enable-sha512 \
 		--enable-shared \
 		--enable-sni \
 		--enable-ssh \
 		--enable-static \
 		--enable-tls13 \
 		--enable-tls13-draft18 \
 		--enable-keying-material \
 		--enable-all-asm
 
 .if "${ARCH}" == "amd64"
 CONFIGURE_ARGS+=	--enable-aesni-with-avx
 .endif
 
 TEST_TARGET=	check
 CFLAGS+=	-DWOLFSSL_ALT_NAMES -DWOLFSSL_GETRANDOM=1 -DWOLFSSL_TLS13_MIDDLEBOX_COMPAT
 CFLAGS_i386=	-DWOLFSSL_SHA224
 CFLAGS_powerpc=	-DWOLFSSL_SHA224
 CFLAGS_powerpc64=	-DWOLFSSL_SHA224
 CFLAGS_powerpc64le=	-DWOLFSSL_SHA224
 
 OPTIONS_DEFINE=	DEBUG DOCS
 
 DEBUG_CONFIGURE_ON=	--enable-debug
 
 post-configure:
 	@${REINPLACE_CMD} \
 		-e 's|$${prefix}/cyassl/include|$${prefix}/include/cyassl|' \
 		-e 's|$${prefix}/cyassl/lib|$${prefix}/lib/cyassl|' \
 		-e '/^pkgconfigdir/s|(libdir)|&data|' \
 		${WRKSRC}/Makefile
 
 post-install-DEBUG-off:
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libwolfssl.so
 
 .include <bsd.port.mk>
diff --git a/security/wolfssl/distinfo b/security/wolfssl/distinfo
index b150053a7498..31a6fa8fa9ba 100644
--- a/security/wolfssl/distinfo
+++ b/security/wolfssl/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1775971830
-SHA256 (wolfssl-5.9.1.zip) = e9d84299739ea16ae18340aee6b8de9e584b5206a751e1df088cd0459cfe5e45
-SIZE (wolfssl-5.9.1.zip) = 28487279
+TIMESTAMP = 1782539423
+SHA256 (wolfssl-5.9.2.zip) = 591cc52625b9bda3cee8af4cba2cf0718b5e466dce5c0604af730d6d37a6d2fa
+SIZE (wolfssl-5.9.2.zip) = 29803913
diff --git a/security/wolfssl/files/patch-cmake_config.in b/security/wolfssl/files/patch-cmake_config.in
deleted file mode 100644
index a44796b6d171..000000000000
--- a/security/wolfssl/files/patch-cmake_config.in
+++ /dev/null
@@ -1,15 +0,0 @@
-Bug report: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294287
-Upstream: https://github.com/wolfSSL/wolfssl/pull/10097
-
---- cmake/config.in.orig	2026-03-18 23:01:31 UTC
-+++ cmake/config.in
-@@ -19,9 +19,6 @@
- /* Define to 1 if you have the `gmtime_r' function. */
- #cmakedefine HAVE_GMTIME_R @HAVE_GMTIME_R@
- 
--/* Define to 1 if you have the <limits.h> header file. */
--#cmakedefine HAVE_LIMITS_H @HAVE_LIMITS_H@
--
- /* Define to 1 if you have the <pcap/pcap.h> header file. */
- #cmakedefine HAVE_PCAP_PCAP_H @HAVE_PCAP_PCAP_H@
- 
diff --git a/security/wolfssl/files/patch-cmake_options.h.in b/security/wolfssl/files/patch-cmake_options.h.in
deleted file mode 100644
index ee9196d69f0d..000000000000
--- a/security/wolfssl/files/patch-cmake_options.h.in
+++ /dev/null
@@ -1,15 +0,0 @@
-Bug report: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294287
-Upstream: https://github.com/wolfSSL/wolfssl/pull/10097
-
---- cmake/options.h.in.orig	2026-03-18 23:01:31 UTC
-+++ cmake/options.h.in
-@@ -33,6 +33,9 @@ extern "C" {
- #endif
- 
- #ifndef WOLFSSL_OPTIONS_IGNORE_SYS
-+/* Since types.h depends on HAVE_LIMITS_H, we must define it in options.h. */
-+#undef HAVE_LIMITS_H
-+#cmakedefine HAVE_LIMITS_H @HAVE_LIMITS_H@
- #undef _GNU_SOURCE
- #cmakedefine _GNU_SOURCE
- #undef _POSIX_THREADS
diff --git a/security/wolfssl/files/patch-configure.ac b/security/wolfssl/files/patch-configure.ac
deleted file mode 100644
index 4d94428448cf..000000000000
--- a/security/wolfssl/files/patch-configure.ac
+++ /dev/null
@@ -1,16 +0,0 @@
-Bug report: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294287
-Upstream: https://github.com/wolfSSL/wolfssl/pull/10097
-
---- configure.ac.orig	2026-03-18 23:01:31 UTC
-+++ configure.ac
-@@ -185,7 +185,9 @@ AC_ARG_ENABLE([freebsdkm-crypto-register],
-     [ENABLED_BSDKM_REGISTER=no]
-     )
- 
--AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h])
-+AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h])
-+# Special case: Since types.h depends on HAVE_LIMITS_H, we must define it in options.h.
-+AC_CHECK_HEADER([limits.h], [AM_CPPFLAGS="$AM_CPPFLAGS -DHAVE_LIMITS_H=1"], [])
- AC_CHECK_LIB([network],[socket])
- AC_C_BIGENDIAN
- AC_C___ATOMIC
diff --git a/security/wolfssl/pkg-plist b/security/wolfssl/pkg-plist
index 396a9770438b..05ffec14c4e7 100644
--- a/security/wolfssl/pkg-plist
+++ b/security/wolfssl/pkg-plist
@@ -1,183 +1,181 @@
 bin/wolfssl-config
 include/wolfssl/callbacks.h
 include/wolfssl/certs_test.h
 include/wolfssl/certs_test_sm.h
 include/wolfssl/crl.h
 include/wolfssl/error-ssl.h
 include/wolfssl/ocsp.h
 include/wolfssl/openssl/aes.h
 include/wolfssl/openssl/asn1.h
 include/wolfssl/openssl/asn1t.h
 include/wolfssl/openssl/bio.h
 include/wolfssl/openssl/bn.h
 include/wolfssl/openssl/buffer.h
 include/wolfssl/openssl/camellia.h
 include/wolfssl/openssl/cmac.h
 include/wolfssl/openssl/cms.h
 include/wolfssl/openssl/compat_types.h
 include/wolfssl/openssl/conf.h
 include/wolfssl/openssl/crypto.h
 include/wolfssl/openssl/des.h
 include/wolfssl/openssl/dh.h
 include/wolfssl/openssl/dsa.h
 include/wolfssl/openssl/ec.h
 include/wolfssl/openssl/ec25519.h
 include/wolfssl/openssl/ec448.h
 include/wolfssl/openssl/ecdh.h
 include/wolfssl/openssl/ecdsa.h
 include/wolfssl/openssl/ed25519.h
 include/wolfssl/openssl/ed448.h
 include/wolfssl/openssl/engine.h
 include/wolfssl/openssl/err.h
 include/wolfssl/openssl/evp.h
 include/wolfssl/openssl/fips_rand.h
 include/wolfssl/openssl/hmac.h
 include/wolfssl/openssl/kdf.h
 include/wolfssl/openssl/lhash.h
 include/wolfssl/openssl/md4.h
 include/wolfssl/openssl/md5.h
 include/wolfssl/openssl/modes.h
 include/wolfssl/openssl/obj_mac.h
 include/wolfssl/openssl/objects.h
 include/wolfssl/openssl/ocsp.h
 include/wolfssl/openssl/opensslconf.h
 include/wolfssl/openssl/opensslv.h
 include/wolfssl/openssl/ossl_typ.h
 include/wolfssl/openssl/pem.h
 include/wolfssl/openssl/pkcs12.h
 include/wolfssl/openssl/pkcs7.h
 include/wolfssl/openssl/rand.h
 include/wolfssl/openssl/rc4.h
 include/wolfssl/openssl/ripemd.h
 include/wolfssl/openssl/rsa.h
 include/wolfssl/openssl/safestack.h
 include/wolfssl/openssl/sha.h
 include/wolfssl/openssl/sha3.h
 include/wolfssl/openssl/srp.h
 include/wolfssl/openssl/ssl.h
 include/wolfssl/openssl/ssl23.h
 include/wolfssl/openssl/stack.h
 include/wolfssl/openssl/tls1.h
 include/wolfssl/openssl/txt_db.h
 include/wolfssl/openssl/ui.h
 include/wolfssl/openssl/x509.h
 include/wolfssl/openssl/x509_vfy.h
 include/wolfssl/openssl/x509v3.h
 include/wolfssl/options.h
 include/wolfssl/quic.h
 include/wolfssl/sniffer.h
 include/wolfssl/sniffer_error.h
 include/wolfssl/ssl.h
 include/wolfssl/test.h
 include/wolfssl/version.h
 include/wolfssl/wolfcrypt/aes.h
 include/wolfssl/wolfcrypt/arc4.h
 include/wolfssl/wolfcrypt/ascon.h
 include/wolfssl/wolfcrypt/asn.h
 include/wolfssl/wolfcrypt/asn_public.h
 include/wolfssl/wolfcrypt/blake2-impl.h
 include/wolfssl/wolfcrypt/blake2-int.h
 include/wolfssl/wolfcrypt/blake2.h
 include/wolfssl/wolfcrypt/camellia.h
 include/wolfssl/wolfcrypt/chacha.h
 include/wolfssl/wolfcrypt/chacha20_poly1305.h
 include/wolfssl/wolfcrypt/cmac.h
 include/wolfssl/wolfcrypt/coding.h
 include/wolfssl/wolfcrypt/compress.h
 include/wolfssl/wolfcrypt/cpuid.h
 include/wolfssl/wolfcrypt/cryptocb.h
 include/wolfssl/wolfcrypt/curve25519.h
 include/wolfssl/wolfcrypt/curve448.h
 include/wolfssl/wolfcrypt/des3.h
 include/wolfssl/wolfcrypt/dh.h
 include/wolfssl/wolfcrypt/dilithium.h
 include/wolfssl/wolfcrypt/dsa.h
 include/wolfssl/wolfcrypt/ecc.h
 include/wolfssl/wolfcrypt/eccsi.h
 include/wolfssl/wolfcrypt/ed25519.h
 include/wolfssl/wolfcrypt/ed448.h
 include/wolfssl/wolfcrypt/error-crypt.h
-include/wolfssl/wolfcrypt/ext_lms.h
-include/wolfssl/wolfcrypt/ext_mlkem.h
-include/wolfssl/wolfcrypt/ext_xmss.h
 include/wolfssl/wolfcrypt/falcon.h
 include/wolfssl/wolfcrypt/fe_448.h
 include/wolfssl/wolfcrypt/fe_operations.h
 include/wolfssl/wolfcrypt/fips_test.h
 include/wolfssl/wolfcrypt/ge_448.h
 include/wolfssl/wolfcrypt/ge_operations.h
 include/wolfssl/wolfcrypt/hash.h
 include/wolfssl/wolfcrypt/hmac.h
 include/wolfssl/wolfcrypt/hpke.h
 include/wolfssl/wolfcrypt/integer.h
 include/wolfssl/wolfcrypt/kdf.h
-include/wolfssl/wolfcrypt/lms.h
 include/wolfssl/wolfcrypt/logging.h
 include/wolfssl/wolfcrypt/md2.h
 include/wolfssl/wolfcrypt/md4.h
 include/wolfssl/wolfcrypt/md5.h
 include/wolfssl/wolfcrypt/mem_track.h
 include/wolfssl/wolfcrypt/memory.h
 include/wolfssl/wolfcrypt/misc.h
-include/wolfssl/wolfcrypt/mlkem.h
 include/wolfssl/wolfcrypt/mpi_class.h
 include/wolfssl/wolfcrypt/mpi_superclass.h
 include/wolfssl/wolfcrypt/oid_sum.h
 include/wolfssl/wolfcrypt/pkcs12.h
 include/wolfssl/wolfcrypt/pkcs7.h
 include/wolfssl/wolfcrypt/poly1305.h
+include/wolfssl/wolfcrypt/puf.h
 include/wolfssl/wolfcrypt/pwdbased.h
 include/wolfssl/wolfcrypt/random.h
 include/wolfssl/wolfcrypt/rc2.h
 include/wolfssl/wolfcrypt/ripemd.h
 include/wolfssl/wolfcrypt/rng_bank.h
 include/wolfssl/wolfcrypt/rsa.h
 include/wolfssl/wolfcrypt/sakke.h
 include/wolfssl/wolfcrypt/settings.h
 include/wolfssl/wolfcrypt/sha.h
 include/wolfssl/wolfcrypt/sha256.h
 include/wolfssl/wolfcrypt/sha3.h
 include/wolfssl/wolfcrypt/sha512.h
 include/wolfssl/wolfcrypt/signature.h
 include/wolfssl/wolfcrypt/siphash.h
 include/wolfssl/wolfcrypt/sm2.h
 include/wolfssl/wolfcrypt/sm3.h
 include/wolfssl/wolfcrypt/sm4.h
+include/wolfssl/wolfcrypt/sp.h
 include/wolfssl/wolfcrypt/sp_int.h
-include/wolfssl/wolfcrypt/sphincs.h
 include/wolfssl/wolfcrypt/srp.h
 include/wolfssl/wolfcrypt/tfm.h
 include/wolfssl/wolfcrypt/types.h
 include/wolfssl/wolfcrypt/visibility.h
 include/wolfssl/wolfcrypt/wc_encrypt.h
 include/wolfssl/wolfcrypt/wc_lms.h
+include/wolfssl/wolfcrypt/wc_mldsa.h
 include/wolfssl/wolfcrypt/wc_mlkem.h
 include/wolfssl/wolfcrypt/wc_port.h
+include/wolfssl/wolfcrypt/wc_she.h
 include/wolfssl/wolfcrypt/wc_slhdsa.h
 include/wolfssl/wolfcrypt/wc_xmss.h
 include/wolfssl/wolfcrypt/wolfentropy.h
 include/wolfssl/wolfcrypt/wolfevent.h
 include/wolfssl/wolfcrypt/wolfmath.h
-include/wolfssl/wolfcrypt/xmss.h
 include/wolfssl/wolfio.h
 lib/cmake/wolfssl/wolfssl-config-version.cmake
 lib/cmake/wolfssl/wolfssl-config.cmake
 lib/cmake/wolfssl/wolfssl-targets.cmake
 lib/libwolfssl.a
 lib/libwolfssl.so
-lib/libwolfssl.so.44
-lib/libwolfssl.so.44.2.0
+lib/libwolfssl.so.45
+lib/libwolfssl.so.45.0.0
 libdata/pkgconfig/wolfssl.pc
 %%PORTDOCS%%%%DOCSDIR%%/QUIC.md
 %%PORTDOCS%%%%DOCSDIR%%/README.txt
+%%PORTDOCS%%%%DOCSDIR%%/dilithium-to-mldsa-migration.md
 %%PORTDOCS%%%%DOCSDIR%%/example/client.c
 %%PORTDOCS%%%%DOCSDIR%%/example/echoclient.c
 %%PORTDOCS%%%%DOCSDIR%%/example/echoserver.c
 %%PORTDOCS%%%%DOCSDIR%%/example/ocsp_responder.c
 %%PORTDOCS%%%%DOCSDIR%%/example/sctp-client-dtls.c
 %%PORTDOCS%%%%DOCSDIR%%/example/sctp-client.c
 %%PORTDOCS%%%%DOCSDIR%%/example/sctp-server-dtls.c
 %%PORTDOCS%%%%DOCSDIR%%/example/sctp-server.c
 %%PORTDOCS%%%%DOCSDIR%%/example/server.c
 %%PORTDOCS%%%%DOCSDIR%%/example/tls_bench.c
 %%PORTDOCS%%%%DOCSDIR%%/taoCert.txt