[CVE-2026-7532] iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constrain…

Descripción técnica

iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP address constraints.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Productos afectados

Wolfssl — Wolfssl

Debilidades (CWE)

CWE-295

Fuente oficial

Publicado en NIST NVD.