AZL-82328 CVE-2026-33810 affecting package golang for versions less than 1.25.9-1

🗓️ 08 Apr 2026 02:16:03Reported by GoogleType

osv🔗 osv.dev👁 9 Views

golang <1.25.9-1 wildcard DNS SAN case mismatch allows bypass of excluded DNS constraints.

Reporter	Title	Published	Views	Family All 1091
RedhatCVE	CVE-2026-33810	13 Apr 202611:33	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update	2 Jun 202614:17	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.5	3 Jun 202614:28	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.	3 Jun 202619:06	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.	3 Jun 202619:06	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.	3 Jun 202619:06	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.0 release.	3 Jun 202619:07	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.	3 Jun 202619:07	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update	4 Jun 202614:16	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release	8 Jun 202612:54	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-33810

28 Aug 2026 17:47Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.2 - 8.8

EPSS0.0034

SSVC

golang DNS constraint bypass wildcard SAN case mismatch certificate validation trust store