Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-27137

Опубликовано: 06 мар. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00358
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 7.5
redhat
4 месяца назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 5.9
msrc
4 месяца назад

Incorrect enforcement of email constraints in crypto/x509

CVSS3: 7.5
debian
4 месяца назад

When verifying a certificate chain which contains a certificate contai ...

CVSS3: 7.5
github
4 месяца назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

EPSS

Процентиль: 28%
0.00358
Низкий

7.5 High

CVSS3

Дефекты

CWE-295