Lucene search
K

6 matches found

OSV
OSV
added 2026/03/27 5:45 p.m.3 views

BIT-NATS-2026-33248 NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with verifyandmap to derive a NATS identity from the client certificate's Subject DN, certain patterns of RDN would not be...

4.2CVSS5.8AI score0.00009EPSS
Exploits0References3
NVD
NVD
added 2026/03/25 9:16 p.m.4 views

CVE-2026-33248

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with verifyandmap to derive a NATS identity from the client certificate's Subject DN, certain patterns of RDN would not be...

4.2CVSS0.00009EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/03/25 9:16 p.m.1 views

CVE-2026-33248

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with verifyandmap to derive a NATS identity from the client certificate's Subject DN, certain patterns of RDN would not be...

4.2CVSS6.3AI score0.00009EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/25 8:18 p.m.1 views

CVE-2026-33248 NATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with verifyandmap to derive a NATS identity from the client certificate's Subject DN, certain patterns of RDN would not be...

4.2CVSS5.8AI score0.00009EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/03/25 8:18 p.m.4 views

CVE-2026-33248

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS for client identity, with verifyandmap to derive a NATS identity from the client certificate's Subject DN, certain patterns of RDN would not be...

4.2CVSS6.1AI score0.00009EPSS
Exploits0
CVE
CVE
added 2026/03/25 8:18 p.m.5 views

CVE-2026-33248

The connected advisory for CVE-2026-33248 concerns NATS: an authentication bypass issue in mTLS verify_and_map where certain Subject DN patterns could bypass client identity verification. Affected product is NATS Server; impact is authentication bypass under specific DN patterns, requiring a vali...

4.2CVSS5.8AI score0.00009EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder