CVE ID :CVE-2026-63576 Published : 2. Oktober 2026 08:17 | 1 Stunde, 3 Minuten ago Description :Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordinate CA, or anyone...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63576 - URI name constraints checked against a mis-parsed host

VERWANDTEARTIKEL

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

CVE-2026-97637 - JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

CVE-2026-63573 - Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap

CVE-2026-63574 - Unbounded allocation from OpenPGP signature and user attribute subpacket lengths

CVE-2026-63577 - Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix

CVE-2026-17507 - MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender