CVE-2026-57826

6.8 Moyenne

Publiée le 18/08/2026 à 22:17 · Modifiée le 31/08/2026 à 22:59 · Analyse NVD reportée · Source : cve@mitre.org

Description

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored.

Traduire en français

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.8 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-295

Références

https://gitcode.com/openHiTLS/openhitls/pull/1399
https://gitcode.com/openHiTLS/openhitls/pull/1657
https://github.com/openHiTLS/openHiTLS/commit/2d3b221d113b452bc197012b185978b8314ee8a4
https://github.com/openHiTLS/openHiTLS/commit/4355cdf5b043d5b9ef698f8f57860f77f8e92561
https://github.com/openHiTLS/openHiTLS/compare/openhitls-0.3.2...openhitls-0.3.3
https://www.openhitls.net/zh/support/HTLS-2026-001.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories