CyberRota Analysis
AI-GeneratedA vulnerability exists in wolfSSL versions starting from 5.9.2, where a certificate lacking a dNSName SAN but containing other SAN types can bypass the Subject Common Name (CN) DNS name-constraint check. This flaw allows the acceptance of out-of-scope CNs, potentially leading to improper validation of certificates and increased risk of man-in-the-middle attacks. Organizations using affected versions of wolfSSL should prioritize patching to mitigate potential security risks associated with this incomplete fix.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert->subjectCN != NULL && cert->altNames == NULL && !cert->isCA instead of "no dNSName SAN", so an out-of-scope CN was accepted. This incomplete fix from CVE-2026-6731, leading to the name-constraint check issue, was introduced in wolfSSL version 5.9.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)