Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-33810

Опубликовано: 11 апр. 2026
Источник: msrc
CVSS3: 5.9
EPSS Низкий

Описание

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

EPSS

Процентиль: 25%
0.0034
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.2
ubuntu
6 месяцев назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.8
redhat
6 месяцев назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
nvd
6 месяцев назад

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVSS3: 8.2
debian
6 месяцев назад

When verifying a certificate chain containing excluded DNS constraints ...

CVSS3: 8.2
redos
5 месяцев назад

Уязвимость golang

EPSS

Процентиль: 25%
0.0034
Низкий

5.9 Medium

CVSS3