CVE-2026-57826

Katalog CVE

CVSS 6.8 · Medium EPSS 0,27%

Kerentanan Improper Certificate Validation. Skor CVSS 3.1 6.8 (Medium) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored.

Rincian

Terbit di NVD

18 Agustus 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Deferred

CVSS 3.1

6.8 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://gitcode.com/openHiTLS/openhitls/pull/1399
• https://gitcode.com/openHiTLS/openhitls/pull/1657
• https://github.com/openHiTLS/openHiTLS/commit/2d3b221d113b452bc197012b185978b8314ee8a4
• https://github.com/openHiTLS/openHiTLS/commit/4355cdf5b043d5b9ef698f8f57860f77f8e92561
• https://github.com/openHiTLS/openHiTLS/compare/openhitls-0.3.2...openhitls-0.3.3
• https://www.openhitls.net/zh/support/HTLS-2026-001.html