CVEvulnerability

CVE-2026-27137

7.5 HIGH Published 2026-03-06 Modified 2026-09-16 Official page ↗
Status
Modified
Published
2026-03-06
Last modified
2026-09-16
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-295

Description

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

Affected configurations

• golang go 1.26.0

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References