← The IT Show
Security
Security · Go Go crypto/x509
Go crypto/x509 Fails to Apply Excluded DNS Name Constraints to Mixed-Case Wildcard SANs Published 8 weeks ago · Updated 8 weeks ago
CVE-2026-33810 describes a certificate validation flaw in which excluded DNS name constraints in a certificate chain are not correctly applied to wildcard DNS SANs that use different letter casing than the constraint, allowing a constrained name to be accepted. The issue affects validation of otherwise trusted chains issued by a root CA in VerifyOptions.Roots or the system certificate pool.
Read the original coverage at National Vulnerability Database (NVD) Captured 8 weeks ago
Related coverage CVE-2026-33845 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-1933 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-33846 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-42009 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-46595 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-42010 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39828 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-33811 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-33814 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39829 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39820 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-9277 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39830 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-5795 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-4878 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39832 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39956 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-35469 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-39835 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-4408 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-3012 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-34993 National Vulnerability Database (NVD) · captured 8 weeks ago CVE-2026-27145 National Vulnerability Database (NVD) · captured 8 weeks ago