Vulnerabilities CVE-2026-33810

CVE-2026-33810

None

Open

TLP:CLEAR

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Details

EPSS Score ⓘ: 0.34%

26.8th percentile
Confidence: 90%
Published: Apr 8, 2026
Last Modified: Aug 12, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.