15235 matches found
CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
CVE-2026-6731
CVE-2026-6731 describes an X.509 name constraint bypass where the Subject CN is treated as a DNS-type name, allowing a certificate to pass DNS constraints if the CN violates them. Public sources (NVD and related feeds) reference this bypass and provide CVSS metrics (v3.1: 7.5, Network, High impac...
CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
CVE-2026-6731
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
EUVD-2026-39555
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
CVE-2026-6731
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
CVE-2026-6731
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...
gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...
gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...
CVE-2026-55180
creationtimestamp| type| source ---|---|--- 2026-06-25 18:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zolmti52o 2026-06-27 00:35:17+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-3qhv-2rgh-x77r 2026-06-29 23:02:17+00:00| seen|...
CVE-2026-48995
creationtimestamp| type| source ---|---|--- 2026-06-25 18:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4zb2p3uk2s 2026-06-26 22:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hp 2026-06-29 22:43:27+00:00| seen|...
CVE-2024-11171
creationtimestamp| type| source ---|---|--- 2026-06-25 18:00:46+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mp4z4qzesk2h...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the RADIUS authentication process. An attacker can gain unauthorized access by sending a spoofed Access-Accept response to the client, which fails to verify the response authenticator,...
CVE-2026-12897
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:02+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-03 2026-06-25 22:53:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jhufu2j25...
MAL-2026-6463 Malicious code in abu-common-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e7b4ac8a492915d8475c73488b64236250746de410c705b7cc43c0656589be package.json declares preinstall and postinstall hooks that invoke curl against a hardcoded bare-IP HTTP endpoint...
K000161897: Linux kernel vulnerability CVE-2026-23303
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug...
CVE-2026-54821 WordPress Visual Link Preview plugin <= 2.3.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Visual Link Preview = 2.3.1 versions...
CVE-2026-53220
In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebtredirecttg dereferences brportgetrcu return without a NULL check, causing a kernel panic when the bridge port has been removed between the original hook invocation and an NFQUEUE reinject. A...
