CVE-2026-57826

EUVD-2026-61278
An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://gitcode.com/openHiTLS/openhitls/pull/1399
https://gitcode.com/openHiTLS/openhitls/pull/1657
https://github.com/openHiTLS/openHiTLS/commit/2d3b221d113b452bc197012b185978b8314ee8a4
https://github.com/openHiTLS/openHiTLS/commit/4355cdf5b043d5b9ef698f8f57860f77f8e92561
https://github.com/openHiTLS/openHiTLS/compare/openhitls-0.3.2...openhitls-0.3.3
https://www.openhitls.net/zh/support/HTLS-2026-001.html