JLSEC-2026-730
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-730.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-730.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2026-730
- Upstream
- Published
- 2026-07-14T21:41:35.775Z
- Modified
- 2026-07-25T18:24:00.949675644Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- 8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
- Summary
- `wolfSSL_X509_verify_cert` in the OpenSSL compatibility layer accepts a certificate chain in which...
- Details
-
wolfSSL_X509_verify_certin the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic ConstraintsCA:FALSEthat is legitimately signed by a trusted root. An attacker who obtains any leaf certificate from a trusted CA (e.g. a free DV cert from Let's Encrypt) can forge a certificate for any subject name with any public key and arbitrary signature bytes, and the function returnsWOLFSSL_SUCCESS/X509_V_OK. The native wolfSSL TLS handshake path (ProcessPeerCerts) is not susceptible and the issue is limited to applications using the OpenSSL compatibility API directly, which would include integrations of wolfSSL into nginx and haproxy. - Database specific
{ "sources": [ { "modified": "2026-06-17T10:59:07.810Z", "database_specific": { "status": "Analyzed" }, "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-5501", "imported": "2026-07-17T22:32:22.028Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5501", "published": "2026-04-10T04:17:17.230Z", "id": "CVE-2026-5501" }, { "modified": "2026-04-27T18:32:02Z", "url": "https://api.github.com/advisories/GHSA-hg75-4cmp-f367", "imported": "2026-07-17T22:32:22.190Z", "html_url": "https://github.com/advisories/GHSA-hg75-4cmp-f367", "published": "2026-04-10T06:31:38Z", "id": "GHSA-hg75-4cmp-f367" }, { "modified": "2026-04-22T13:59:28Z", "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-21294", "imported": "2026-07-17T22:32:31.992Z", "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21294", "published": "2026-04-10T03:07:39Z", "id": "EUVD-2026-21294" } ], "license": "CC-BY-4.0" }- References