CVE-2026-27137
Incorrect enforcement of email constraints in crypto/x509
CVSS Score
7.5
EPSS Score
0.6%
EPSS Percentile
45th
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
| Vendor | go standard library |
| Product | crypto/x509 |
| Published | Mar 6, 2026 |
| Last Updated | Jul 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for go standard library crypto/x509
Be the first to know when new high vulnerabilities affecting go standard library crypto/x509 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Go standard library / crypto/x509
1.26.0-0 < 1.26.1
References
go.dev: https://go.dev/cl/752182 go.dev: https://go.dev/issue/77952 groups.google.com: https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4599 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-27137 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2445345 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39810 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10929 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8842 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10169 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19022 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22937 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19049 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19132 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28038 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19181 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23228 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22714 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5549 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9872 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22862 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26585 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11800 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22423 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22347 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5110 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23345 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29854 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26568 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13545 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7291 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9052 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10184 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10158 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10175 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9697 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9698 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9699 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9385 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19375 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14879 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10125 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10250 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10225 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8338 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8337 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8167
Credits
Jakub Ciolek