CVE-2026-6731

Опубликовано: 25 июн. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

Ссылки

https://github.com/wolfSSL/wolfssl/pull/10223
Issue Tracking
Patch
https://www.wolfssl.com/docs/security-vulnerabilities/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

Версия от 3.9.10 (включая) до 5.9.2 (исключая)

EPSS

Процентиль: 3%

0.00124

Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVE-2026-6731

CVSS3: 7.5

ubuntu

около 1 месяца назад

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

CVE-2026-6731

msrc

30 дней назад

X.509 name constraint bypass via Subject CN treated as a DNS name

CVE-2026-6731

CVSS3: 7.5

debian

около 1 месяца назад

X.509 name constraint bypass via the Subject Common Name when treated ...

GHSA-9c3c-227q-3j67

CVSS3: 7.5

github

около 1 месяца назад

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

EPSS

Процентиль: 3%

0.00124

Низкий

7.5 High

CVSS3

Дефекты

CWE-295