CVE-2026-27137

EUVD-2026-10085
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
Affected Products (NVD)
VendorProductVersion
golanggo
1.26.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:0.2.3-4.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:0.2.7-3.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.25.2-3.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:1.26.2-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:0.9.27-6.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:165.1-2.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
0:52.1-1.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:0.2.3-4.el10_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:1.26.2-1.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:165.1-2.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:52.1-1.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
6:0.8.5-2.el9_6.2 ≤
𝑥
< *
ADP
Red HatRed Hat OpenStack Platform 17.1 for RHEL 9
0:3.4.26-9.5.el9ost ≤
𝑥
< *
ADP
Red HatRed Hat OpenStack Services on OpenShift 18.0
0:0.1.1-18.0.20260602234716.a95ae05.el9ost ≤
𝑥
< *
ADP
Red HatRHEM 1.0 for RHEL 9
0:1.0.3-1.el9em ≤
𝑥
< *
ADP
Red HatRHEM 1.1 for RHEL 10
0:1.1.3-1.el10em ≤
𝑥
< *
ADP
Red HatRHEM 1.1 for RHEL 9
0:1.1.3-1.el9em ≤
𝑥
< *
ADP
Red HatDevWorkspace Operator 0.4
1776457293 ≤
𝑥
< *
ADP
Red HatLogging Subsystem for Red Hat OpenShift 6.0
1781192891 ≤
𝑥
< *
ADP
Red HatLogging Subsystem for Red Hat OpenShift 6.2
1776800087 ≤
𝑥
< *
ADP
Red HatLogging Subsystem for Red Hat OpenShift 6.4
1780051640 ≤
𝑥
< *
ADP
Red HatMulticluster Global Hub 1.3.4
1779210675 ≤
𝑥
< *
ADP
Red HatMulticluster Global Hub 1.4.5
1779838819 ≤
𝑥
< *
ADP
Red HatMulticluster Global Hub 1.5.4
1773650627 ≤
𝑥
< *
ADP
Red HatMulticluster Global Hub 1.5.4
1779828691 ≤
𝑥
< *
ADP
Red HatMulticluster Global Hub 1.6.2
1780320809 ≤
𝑥
< *
ADP
Red HatOpenShift API for Data Protection 1.4
1779809598 ≤
𝑥
< *
ADP
Red HatOpenShift API for Data Protection 1.5
1779808027 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.15
1774085848 ≤
𝑥
< *
ADP
Red HatRed Hat Ansible Automation Platform 2.6
1777391542 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
1.26.2-1.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat Lightspeed \(formerly Insights\) for Runtimes 1
1.0.2-1776288486 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.25
1776773362 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.6.5
1774334066 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.7.4
1776846936 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.27
1776789889 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift distributed tracing 3.9.3
1776435680 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.18
1776755965 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.19
1776767162 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.20
1776773421 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.16
1779204086 ≤
𝑥
< *
ADP
Red HatRed Hat Satellite 6.18
1778082595 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.3
1776339099 ≤
𝑥
< *
ADP
Red HatRed Hat Web Terminal 1.11
1776966691 ≤
𝑥
< *
ADP
Red HatRed Hat Web Terminal 1.12
1776959849 ≤
𝑥
< *
ADP
Red HatRed Hat Web Terminal 1.13
1776197785 ≤
𝑥
< *
ADP
Red HatRed Hat Web Terminal 1.14
1776199398 ≤
𝑥
< *
ADP
Red HatRed Hat Web Terminal 1.15
1775672762 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
golang-1.15
bullseye
1.15.15-1~deb11u4
fixed
golang-1.19
bookworm
1.19.8-2
fixed
golang-1.24
trixie
1.24.4-1
fixed
golang-1.25
forky
1.25.12-1
fixed
sid
1.25.12-1
fixed
golang-1.26
forky
1.26.5-1
fixed
sid
1.26.5-1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
go-toolset
RHEL 9
0:1.26.2-1.el9_8
fixed
golang
RHEL 9
0:1.26.2-1.el9_8
fixed
golang-bin
RHEL 9
0:1.26.2-1.el9_8
fixed
golang-docs
RHEL 9
0:1.26.2-1.el9_8
fixed
golang-misc
RHEL 9
0:1.26.2-1.el9_8
fixed
golang-race
RHEL 9
0:1.26.2-1.el9_8
fixed
golang-src
RHEL 9
0:1.26.2-1.el9_8
fixed
golang-tests
RHEL 9
0:1.26.2-1.el9_8
fixed
image-builder
RHEL 9
0:52.1-1.el9_8
fixed
osbuild-composer
RHEL 9
0:165.1-2.el9_8
fixed
osbuild-composer-core
RHEL 9
0:165.1-2.el9_8
fixed
osbuild-composer-worker
RHEL 9
0:165.1-2.el9_8
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
golang
Azure Linux 3.0
0:1.26.1-1.azl3
fixed
References