CVE-2026-5263
URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.
- Score
- CVSS 4.0 7.0 High
- Status
- Modified - facts@wolfssl.com
- Published
- 2026-04-09
- Last modified
- 2026-07-02
- Weaknesses
- CWE-295
Affected products
References
- https://github.com/wolfSSL/wolfssl/pull/10048
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2410
