vulnti.work

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will n…

High CVSS 7.5
CVECVE-2026-27137
First seen2026-07-15 12:31 UTC
Disclosed2026-03-06 22:16 UTC
Last updated2026-08-25 14:15 UTC
Channel statusauto

Summary

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD