CVE-2026-89134
— UNSCOREDpublic exploit availablePublished 2026-09-27 · Updated 2026-09-28
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert->subjectCN != NULL && cert->altNames == NULL && !cert->isCA instead of "no dNSName SAN", so an out-of-scope CN was accepted. This incomplete fix from CVE-2026-6731, leading to the name-constraint check issue, was introduced in wolfSSL version 5.9.2.
Weaknesses
CWE-295
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100551PoC
- HIGHCVE-2026-100665PoC
- MEDIUMCVE-2026-100701PoC
- HIGHCVE-2026-100835PoC
- HIGHCVE-2026-101916PoC
- MEDIUMCVE-2026-16792
- LOWCVE-2026-18173
- HIGHCVE-2026-40539
Related by shared AI tags and CWE weakness class. Browse the full archive.