AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-27138

MEDIUM · CVSS 5.9 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-03-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.9. See the original NVD description below for full technical details.

CVE
CVE-2026-27138
Severity
MEDIUM
CVSS
5.9
EPSS
0.35%

Original NVD Description

Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-42505 MEDIUM CVE-2026-39822 HIGH CVE-2026-46604 HIGH CVE-2023-54365 HIGH CVE-2026-42506 MEDIUM CVE-2026-42502 MEDIUM