Количество 5
Количество 5
CVE-2026-5263
URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.
CVE-2026-5263
URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.
CVE-2026-5263
URI nameConstraints not enforced in ConfirmNameConstraints()
CVE-2026-5263
URI nameConstraints from constrained intermediate CAs are parsed but n ...
GHSA-9xmr-c663-3rpr
URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-5263 URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-5263 URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-5263 URI nameConstraints not enforced in ConfirmNameConstraints() | 0% Низкий | 4 месяца назад | |
| CVE-2026-5263 URI nameConstraints from constrained intermediate CAs are parsed but n ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| GHSA-9xmr-c663-3rpr URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу