Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.
CVE-2026-27138
NONE
EPSS 0.03%
Updated Mar 06, 2026
Certificate
CVE Details
CVE ID
CVE-2026-27138
Published Date
Mar 06, 2026
Vendor
Certificate
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.03%
Likelihood of exploitation in next 30 days
Percentile:
10.0th percentile (higher than 10.0% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory