CVE-2026-5263

URI nameConstraints not enforced in ConfirmNameConstraints()

State: Published
Severity: 7.0 High
Published: Apr 9, 2026
Updated: Jul 2, 2026
Reserved: Mar 31, 2026

Description

URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A compromised or malicious sub-CA could issue leaf certificates with URI SAN entries that violate the nameConstraints of the issuing CA, and wolfSSL would accept them as valid.

Scores

CVSS	Score	Vector	Source
4.0	7.0 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N	wolfSSL

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
wolfSSLwolfSSL	before 5.9.1Affected

References

https://github.com/wolfSSL/wolfssl/pull/10048
https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2410

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.