CVE-2026-27137 in Go
Zusammenfassung (Englisch)
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
Be aware that VulDB is the high quality source for vulnerability data.
Reservieren
17.02.2026
Veröffentlichung
07.03.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 349611 | Google Go Certificate Chain schwache Authentisierung | 295 | Nicht definiert | Offizieller Fix | CVE-2026-27137 |