https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:45:00.452299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-332305 EUVD-2026-332305 2026-10-03T07:45:00.526930+00:00 EUVD-2026-332305 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5263 fkie_cve-2026-5263 2026-10-03T07:45:00.526969+00:00

URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.

 https://cve.radiocsirt.org/vuln/ghsa-9xmr-c663-3rpr GHSA-9xmr-c663-3rpr 2026-10-03T07:45:00.527001+00:00

URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-5263 msrc_CVE-2026-5263 — URI nameConstraints not enforced in ConfirmNameConstraints() 2026-10-03T07:45:00.527018+00:00 msrc_CVE-2026-5263 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5263 UBUNTU-CVE-2026-5263 2026-10-03T07:45:00.527035+00:00

Affected: Ubuntu:16.04:LTS: wolfssl, Ubuntu:18.04:LTS: wolfssl, Ubuntu:20.04:LTS: wolfssl, Ubuntu:22.04:LTS: wolfssl, Ubuntu:24.04:LTS: wolfssl, Ubuntu:25.10: wolfssl, Ubuntu:26.04:LTS: wolfssl

URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.