Topic

CVE-2026-3833

Coverage tagged "CVE-2026-3833".

News · via CERT/CC

VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement

Overview This note covers thirteen library-specific records (VU#948176.6, .8–.19) of how widely used TLS libraries apply X.509 Name Constraints. The records describe cases where a constrained name…

Data Breaches 2 days ago 1 min read

News · via CERT/CC

VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation

Overview This note covers differences in how TLS libraries interpret X.509 Name Constraints. A certificate that one library accepts may be rejected by another. Some of those differences are defects…

Vulnerabilities and CVEs 3 days ago 1 min read