CVE-2026-57826

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-57826

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57826.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-57826

Published

2026-08-18T00:00:00Z

Modified

2026-08-20T03:54:33.884108853Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57826.json"
}

References

Affected packages

Git / github.com/openhitls/openhitls

Affected ranges

Type

GIT

Repo

https://github.com/openhitls/openhitls

Events

Introduced

da225c3fb5f18433b9fef900ecc8d0173423640c

Fixed

3d29581401bff58e07bdbe551729ef24082134c5

Fixed

2d3b221d113b452bc197012b185978b8314ee8a4

Fixed

4355cdf5b043d5b9ef698f8f57860f77f8e92561

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.2.0"
        },
        {
            "fixed": "0.3.2"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

openhitls-0.*

openhitls-0.2.0

openhitls-0.2.1

openhitls-0.2.2-alpha1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57826.json"