VULNERABILITY INTELLIGENCE

CVE-2026-27137

CVSS score7.5 HIGH

EPSS probability0.66%

CISA KEVNot currently listed

Published2026-03-06

Last modified2026-09-16

Description

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.