CVE-2026-5501 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

wolfSSLX509verifycert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints CA:FALSE that is legitimately signed by a trusted root. An attacker who obtains any leaf...

Mozilla Thunderbird < 6.0.2 Untrusted CA

The installed version of Thunderbird is earlier than 6.0.2. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Thunderbird. Note this is a further fix to MFSA 2011-34,...

Firefox 3.6.x < 3.6.22 Untrusted CA

The installed version of Firefox 3.6.x is earlier than 3.6.22. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Firefox. Note this is a further fix to MFSA 2011-34,...

Google Chrome < 13.0.782.220 Untrusted CA

The version of Google Chrome installed on the remote host is earlier than 13.0.782.220. Due to a recent attack against certificate authority DigiNotar, Google has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Google Chrome. Note this is a...