CVE-2026-6731

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted...

MINI-6VQM-VWHJ-7MFM

Bulletin has no description...

MINI-XC2W-36P5-J8M4

Bulletin has no description...

MINI-8244-8MPR-9XFG

Bulletin has no description...

MINI-Q588-F4PG-PWV8

Bulletin has no description...

MINI-X54F-PP2M-P7F4

Bulletin has no description...

MINI-P3F2-HVXQ-V3FW

Bulletin has no description...

MINI-W9HJ-42HM-JCFP

Bulletin has no description...

MINI-XH87-3774-W677

Bulletin has no description...

MINI-FC6W-PQJ8-PHJX

Bulletin has no description...

MINI-FJ6W-9RJJ-9HXM

Bulletin has no description...

MINI-R647-J7J2-497M

Bulletin has no description...

MINI-269J-9F3G-86MJ

Bulletin has no description...

CVE-2026-12340 Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...

CVE-2026-12340

The CVE-2026-12340 issue is a concrete out-of-bounds heap read during SM2/SM3 certificate verification. Specifically, when parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier is computed by reading the trailing 65 bytes of the public key without verifying the key length fi...

CVE-2026-12340 Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...

MINI-MP79-G6H4-63CF

Bulletin has no description...

MINI-MCFH-89QJ-X438

Bulletin has no description...

GO-2026-5189 Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI in github.com/free5gc/pcf

Free5GC PCF: Missing authentication middleware in NpcfSMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI in github.com/free5gc/pcf...

gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...