CVE-2026-27137
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
- Published Mar 6, 2026
- CVSS 7.5 high
- 0.7% chance of exploitation in the next 30 days (EPSS)
- A fix is available