CVSS 3.1
8.2 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NCVE-2026-33810
High (8.2) in golang go. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in stdlib 1.26.2.
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-295, CWE-1289
- Published
- Modified
- Record from
- the NVD, synced
Affected
- golang:go
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GO-2026-4866 | Go | stdlib | >=1.26.0-0 <1.26.2 | 1.26.2 |