CVE-2026-57826

Published: Aug 18, 2026Modified: Aug 31, 2026Deferred

6.8

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.6 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored.

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (6)

https://gitcode.com/openHiTLS/openhitls/pull/1399

Source: cve@mitre.org

https://gitcode.com/openHiTLS/openhitls/pull/1657

Source: cve@mitre.org

https://github.com/openHiTLS/openHiTLS/commit/2d3b221d113b452bc197012b185978b8314ee8a4

Source: cve@mitre.org

https://github.com/openHiTLS/openHiTLS/commit/4355cdf5b043d5b9ef698f8f57860f77f8e92561

Source: cve@mitre.org

https://github.com/openHiTLS/openHiTLS/compare/openhitls-0.3.2...openhitls-0.3.3

Source: cve@mitre.org

https://www.openhitls.net/zh/support/HTLS-2026-001.html

Source: cve@mitre.org

Timeline

No history available yet.