Report: CVE-2026-33810 - Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Report: CVE-2026-33810 - Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

CVE ID :CVE-2026-33810 Published : April 8, 2026, 1:06 a.m. | 58 minutes ago Description :When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
April 8, 2026