Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-10592

Wildcard DNS SAN bypasses CA name-constraint checks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
wolfSSL

Description

Certificates with wildcard DNS SANs (e.g. *.example.com) bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wolfSSL wolfSSL

Default version status: unaffected

  • 3.9.10 to ≤ 5.9.1affected

References