CVE-2026-33810
EUVD-2026-2002408.04.2026, 02:16
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | 1.26.0 ≤ 𝑥 < 1.26.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Cryostat 4 on RHEL 9 | 4.1.1-7 ≤ 𝑥 < * | ADP |
| Red Hat | HawtIO HawtIO 4.4.0 | operator-container ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:0.144.0-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:0.9.27-7.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:0.4.9.2-1.el10_2.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:0.144.0-2.el10_0 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 8060020260803064027.ad008a3a ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 8060020260803064027.ad008a3a ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:0.144.0-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:0.144.0-2.el9_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 2:1.33.15-1.el9_4.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 4:4.9.4-20.el9_4.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 2:1.14.6-1.el9_4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:0.144.0-2.el9_6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenStack Platform 16.2 | 0:0.2.1-1.1.el8ost ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenStack Platform 16.2 | 0:3.3.23-22.el8ost ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenStack Platform 17.1 for RHEL 9 | 0:3.4.26-9.5.el9ost ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 | 0:0.1.1-18.0.20260602234716.a95ae05.el9ost ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 | 0:0.0.3-5.el9sat ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.0 for RHEL 9 | 0:1.0.3-1.el9em ≤ 𝑥 < * | ADP |
| Red Hat | Builds for Red Hat OpenShift 1.6.1 | 1776847666 ≤ 𝑥 < * | ADP |
| Red Hat | Logging for Red Hat OpenShift 6.4 | 1780051640 ≤ 𝑥 < * | ADP |
| Red Hat | Logging Subsystem for Red Hat OpenShift 6 | 1781192891 ≤ 𝑥 < * | ADP |
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 | 1784747813 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.4.8 | 1779838819 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.6.2 | 1780320809 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785180878 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.4 | 1779809598 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.5 | 1779808027 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift Compliance Operator 1 | 1781605005 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777391542 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502438 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194574 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127736 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 1.26.2-1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Lightspeed \(formerly Insights\) for Runtimes 1.0 | 1.0.3-1779996197 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit 1.8 | 1783914276 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat multicluster global hub 1.5.1 | 1779828691 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1776846936 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces 3.28 | 1779829736 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift distributed tracing 3.9.2 | 1776435680 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1780399582 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.11 | 1780423339 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.11 | 1784296203 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.12 | 1780425077 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.12 | 1784247610 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.13 | 1780425080 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.13 | 1784296127 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.14 | 1780424928 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.14 | 1784296114 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.15 | 1780424829 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Web Terminal 1.15 | 1784296033 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-1.23 |
| ||||||||||||||
| golang-1.24 |
| ||||||||||||||
| golang-1.25 |
| ||||||||||||||
| golang |
| ||||||||||||||
| golang-1.10 |
| ||||||||||||||
| golang-1.13 |
| ||||||||||||||
| golang-1.14 |
| ||||||||||||||
| golang-1.16 |
| ||||||||||||||
| golang-1.17 |
| ||||||||||||||
| golang-1.18 |
| ||||||||||||||
| golang-1.20 |
| ||||||||||||||
| golang-1.21 |
| ||||||||||||||
| golang-1.22 |
| ||||||||||||||
| golang-1.6 |
| ||||||||||||||
| golang-1.8 |
| ||||||||||||||
| golang-1.9 |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.
- CWE-1289 - Improper Validation of Unsafe Equivalence in InputThe product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.
Vulnerability Media Exposure
References