CVE-2026-6731

HIGH

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE
Published: 6/25/2026Modified: 6/27/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-6731 — X.509 name constraint bypass via the Subject Common Name when treated as a DNS-t...

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.

CVE-2026-6731
NIST NVD

References (2)

https://github.com/wolfSSL/wolfssl/pull/10223Issue TrackingPatchhttps://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisory