Back to search
CVE-2026-5263
Published: Apr 9, 2026
Modified: Apr 10, 2026
PUBLISHED
Description
URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.
| Vendor | Product | Versions |
|---|---|---|
wolfSSL | wolfSSL | affected 0 - < 5.9.1 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now