Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-33810

Опубликовано: 11 апр. 2026
Источник: msrc
CVSS3: 5.9
EPSS Низкий

Описание

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

EPSS

Процентиль: 17%
0.00259
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.2
ubuntu
3 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.8
redhat
3 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
nvd
3 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
debian
3 месяца назад

When verifying a certificate chain containing excluded DNS constraints ...

CVSS3: 7.5
github
3 месяца назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

EPSS

Процентиль: 17%
0.00259
Низкий

5.9 Medium

CVSS3

Уязвимость CVE-2026-33810