CVE-2026-6731 — X.509 name constraint bypass via Subject CN treated as a DNS name
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be a…
Published: 2026-06-25 · CVSS: 6.0 · CVSS 4.0
X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN violates an issuing CA's DNS name constraints could be accepted.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7