MEDIUM

CVE-2026-10592

Wolfssl Wolfssl 2026-06-25 CVSS v3.1

CVSS

5.3

Description

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

Weakness (CWE)

CWE-295 Improper Certificate Validation

EPSS Score

0.2%

Probability of exploitation in next 30 days

10th percentile

References

https://github.com/wolfSSL/wolfssl/pull/10549 Issue Tracking, Patch https://www.wolfssl.com/docs/security-vulnerabilities/ Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE