nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

🗓️ 31 May 2026 08:01:59Reported by MicrosoftType

DNS bypass through subject CommonName fallback in public_key hostname verification and nameConstraints

Reporter	Title	Published	Views	Family All 25
FreeBSD	Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints	27 May 202600:00	–	freebsd
ATTACKERKB	CVE-2026-42790	27 May 202615:09	–	attackerkb
CBLMariner	CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1	10 Jun 202602:46	–	cbl_mariner
CNNVD	Erlang/OTP 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-42790	27 May 202615:09	–	cve
Cvelist	CVE-2026-42790 nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification	27 May 202615:09	–	cvelist
Debian CVE	CVE-2026-42790	27 May 202615:09	–	debiancve
Tenable Nessus	Erlang/OTP 19.3 < 26.2.5.21 / 27.0 < 27.3.4.12 / 28.0 < 28.5.0.1 / 29.0 < 29.0.1 DNS nameConstraints Bypass (CVE-2026-42790)	29 May 202600:00	–	nessus
Tenable Nessus	FreeBSD : Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints (93576148-5a54-11f1-b886-4c526214c986)	28 May 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : erlang (openSUSE-SU-2026:20907-1)	11 Jun 202600:00	–	nessus