{"id":"GO-2026-4866","revision":null,"records":[{"revision":"b6efdf4674654dd584edb7cb4ed97873","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-33810","aliases":[],"title":"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509","description":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.","state":0,"publishedAt":"2026-04-08T01:06:56.546+00:00","modifiedAt":"2026-09-18T12:04:39.388+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"crypto/x509","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Go standard library\",\n                    \"product\": \"crypto/x509\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"crypto/x509\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1.26.0-0\",\n                            \"lessThan\": \"1.26.2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"newDNSConstraints\"\n                        },\n                        {\n                            \"name\": \"dnsConstraints.query\"\n                        },\n                        {\n                            \"name\": \"Certificate.Verify\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/cl/763763","https://go.dev/issue/78332","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","https://pkg.go.dev/vuln/GO-2026-4866"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-33810","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-33810","identifiers":["CVE-2026-33810"]},"retained":false,"historicalAffected":[]},{"revision":"694f3e31581843099bc4a04208d8de37","observedAt":"2026-11-09T08:13:31.66+00:00","statement":{"source":"euvd","id":"EUVD-2026-20024","aliases":["CVE-2026-33810"],"title":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certi…","description":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L","score":8.8,"severity":null}],"references":["https://go.dev/cl/763763","https://go.dev/issue/78332","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","https://pkg.go.dev/vuln/GO-2026-4866"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-20024","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 8, 2026, 1:06:56 AM","dateUpdated":"Sep 18, 2026, 12:04:39 PM"},"relatedAdvisories":[{"id":"RHSA-2026:62577","title":"Red Hat Security Advisory: go-fdo-client security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-42504","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:10155","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5","vulnerabilityIds":["CVE-2026-33186","CVE-2026-33211","CVE-2026-33810"]},{"id":"RHSA-2026:9385","title":"Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release","vulnerabilityIds":["CVE-2025-68121","CVE-2026-4645","CVE-2026-4800","CVE-2026-4926","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32282","CVE-2026-32285","CVE-2026-33186","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:68334","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-27145","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39831","CVE-2026-41178","CVE-2026-42306","CVE-2026-42499","CVE-2026-42504","CVE-2026-44740","CVE-2026-46597","CVE-2026-48050","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-69153","CVE-2026-71556","CVE-2026-81521"]},{"id":"RHSA-2026:34192","title":"Red Hat Security Advisory: buildah security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:34197","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:65895","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:34196","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33810","CVE-2026-34986"]},{"id":"openSUSE-SU-2026:20571-1","title":"Security update for go1.26","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810"]},{"id":"RHSA-2026:56223","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33810","CVE-2026-39821","CVE-2026-42504"]},{"id":"RHSA-2026:49702","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-27145","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39819","CVE-2026-39820","CVE-2026-39821","CVE-2026-39822","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-42499","CVE-2026-42501","CVE-2026-42507"]},{"id":"RHSA-2026:29854","title":"Red Hat Security Advisory: Red Hat OpenShift API for Data Protection","vulnerabilityIds":["CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33747","CVE-2026-33748","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:22347","title":"Red Hat Security Advisory: Multicluster Global Hub 1.4.5 security update","vulnerabilityIds":["CVE-2026-4427","CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-27889","CVE-2026-29785","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33215","CVE-2026-33216","CVE-2026-33217","CVE-2026-33218","CVE-2026-33219","CVE-2026-33247","CVE-2026-33413","CVE-2026-33487","CVE-2026-33810","CVE-2026-33813","CVE-2026-33997","CVE-2026-34040","CVE-2026-34986","CVE-2026-40890","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"RHSA-2026:24478","title":"Red Hat Security Advisory: RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-4660","CVE-2026-32280","CVE-2026-33810"]},{"id":"RHSA-2026:22862","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.5","vulnerabilityIds":["CVE-2026-25679","CVE-2026-27137","CVE-2026-31812","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32829","CVE-2026-33810"]},{"id":"RHSA-2026:63332","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-42499","CVE-2026-56853","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:68504","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:61907","title":"Red Hat Security Advisory: runc security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-33810"]},{"id":"RHSA-2026:54757","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory","vulnerabilityIds":["CVE-2025-61726","CVE-2025-61729","CVE-2025-65073","CVE-2025-68121","CVE-2026-23490","CVE-2026-24708","CVE-2026-25679","CVE-2026-27137","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33413","CVE-2026-33551","CVE-2026-33810","CVE-2026-33811","CVE-2026-34881","CVE-2026-39821","CVE-2026-42789","CVE-2026-42790","CVE-2026-43001","CVE-2026-44393"]},{"id":"RHSA-2026:49703","title":"Red Hat Security Advisory: delve security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-27145","CVE-2026-33810","CVE-2026-33811"]},{"id":"RHSA-2026:76795","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33376","CVE-2026-33377","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42127","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:88339","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-94440","CVE-2026-97031","CVE-2026-111943"]},{"id":"RHSA-2026:57649","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-27145","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39819","CVE-2026-39820","CVE-2026-39821","CVE-2026-39822","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-42499","CVE-2026-42501","CVE-2026-42504","CVE-2026-42507"]},{"id":"RHSA-2026:21769","title":"Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update","vulnerabilityIds":["CVE-2026-4427","CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-27889","CVE-2026-29785","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33215","CVE-2026-33216","CVE-2026-33217","CVE-2026-33218","CVE-2026-33219","CVE-2026-33247","CVE-2026-33413","CVE-2026-33487","CVE-2026-33810","CVE-2026-33813","CVE-2026-33997","CVE-2026-34040","CVE-2026-34986","CVE-2026-40890","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"RHSA-2026:65359","title":"Red Hat Security Advisory: ignition security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:14391","title":"Red Hat Security Advisory: Red Hat build of Cryostat security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810"]},{"id":"RHSA-2026:41928","title":"Red Hat Security Advisory: Red Hat Migration Toolkit for Containers","vulnerabilityIds":["CVE-2025-7783","CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-52881","CVE-2025-58183","CVE-2025-58754","CVE-2025-61726","CVE-2025-61729","CVE-2025-62718","CVE-2025-66031","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2025-68121","CVE-2025-69223","CVE-2025-69227","CVE-2025-69228","CVE-2026-4800","CVE-2026-6322","CVE-2026-9277","CVE-2026-9595","CVE-2026-12143","CVE-2026-13149","CVE-2026-13676","CVE-2026-21441","CVE-2026-22029","CVE-2026-23490","CVE-2026-23745","CVE-2026-25679","CVE-2026-25681","CVE-2026-27136","CVE-2026-27137","CVE-2026-29063","CVE-2026-30922","CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-40895","CVE-2026-42264","CVE-2026-42338","CVE-2026-42499","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-45736","CVE-2026-45822","CVE-2026-48779"]},{"id":"RHSA-2026:61253","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-27145","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39819","CVE-2026-39820","CVE-2026-39821","CVE-2026-39822","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-42499","CVE-2026-42501","CVE-2026-42504","CVE-2026-42507"]},{"id":"RHSA-2026:65534","title":"Red Hat Security Advisory: image-builder security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-33810","CVE-2026-33811","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:36651","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-68121","CVE-2025-69873","CVE-2026-4800","CVE-2026-4926","CVE-2026-6322","CVE-2026-22029","CVE-2026-25679","CVE-2026-29063","CVE-2026-32141","CVE-2026-32280","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"SUSE-SU-2026:21356-1","title":"Security update for go1.26","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810"]},{"id":"RHSA-2026:92291","title":"Red Hat Security Advisory: LVMS 4.16 Bug Fix and Enhancement update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-33810","CVE-2026-33818","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:26571","title":"Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810"]},{"id":"RHSA-2026:11330","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.5","vulnerabilityIds":["CVE-2026-33186","CVE-2026-33211","CVE-2026-33810"]},{"id":"msrc_CVE-2026-33810","title":"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509","vulnerabilityIds":["CVE-2026-33810"]},{"id":"RHSA-2026:22961","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.0 release.","vulnerabilityIds":["CVE-2026-32280","CVE-2026-33186","CVE-2026-33810"]},{"id":"RHSA-2026:19144","title":"Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810"]},{"id":"RHSA-2026:28047","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update","vulnerabilityIds":["CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33413","CVE-2026-33810"]},{"id":"RHSA-2026:22960","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.","vulnerabilityIds":["CVE-2026-32280","CVE-2026-33810"]},{"id":"RHSA-2026:19181","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-27137","CVE-2026-33810"]},{"id":"RHSA-2026:61313","title":"Red Hat Security Advisory: rhc security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33811"]},{"id":"openSUSE-SU-2026:21254-1","title":"Security update for go1.26-openssl","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39819","CVE-2026-39820","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-39836","CVE-2026-42499","CVE-2026-42501","CVE-2026-42504","CVE-2026-42507"]},{"id":"RHSA-2026:69235","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:51033","title":"Red Hat Security Advisory: Red Hat OpenShift API for Data Protection","vulnerabilityIds":["CVE-2024-25621","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-66506","CVE-2025-68121","CVE-2026-25681","CVE-2026-27136","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33747","CVE-2026-33748","CVE-2026-33810","CVE-2026-33811","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39835","CVE-2026-42306","CVE-2026-42499","CVE-2026-42508","CVE-2026-44740","CVE-2026-46595","CVE-2026-46597","CVE-2026-53488","CVE-2026-53492"]},{"id":"RHSA-2026:87245","title":"Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-4673","CVE-2025-22866","CVE-2025-22874","CVE-2025-68121","CVE-2026-27137","CVE-2026-27143","CVE-2026-27144","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-56866","CVE-2026-78659","CVE-2026-78660","CVE-2026-78663","CVE-2026-78667","CVE-2026-78669","CVE-2026-94439","CVE-2026-94440","CVE-2026-94444","CVE-2026-94447","CVE-2026-94448","CVE-2026-97030","CVE-2026-97031","CVE-2026-97032","CVE-2026-111943"]},{"id":"RHSA-2026:25089","title":"Red Hat Security Advisory: HawtIO 4.4.0 for Red Hat build of Apache Camel 4 Release and security update.","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61726","CVE-2025-61729","CVE-2026-1002","CVE-2026-1605","CVE-2026-2332","CVE-2026-5795","CVE-2026-6321","CVE-2026-22731","CVE-2026-24400","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33810","CVE-2026-34478","CVE-2026-34480","CVE-2026-39852","CVE-2026-40972","CVE-2026-40973","CVE-2026-40975","CVE-2026-42033","CVE-2026-42035","CVE-2026-42039","CVE-2026-42041","CVE-2026-42043","CVE-2026-42044"]},{"id":"RHSA-2026:51288","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33810","CVE-2026-42508"]},{"id":"RHSA-2026:11331","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2","vulnerabilityIds":["CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-33186","CVE-2026-33211","CVE-2026-33810"]},{"id":"RHSA-2026:67517","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2026-8609","CVE-2026-25681","CVE-2026-27136","CVE-2026-27137","CVE-2026-33376","CVE-2026-33377","CVE-2026-33382","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42127","CVE-2026-42499","CVE-2026-42502","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:42047","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.","vulnerabilityIds":["CVE-2025-61729","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-42504"]},{"id":"RHSA-2026:88340","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-94440","CVE-2026-97031","CVE-2026-111943"]},{"id":"RHSA-2026:22485","title":"Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810"]},{"id":"RHSA-2026:19714","title":"Red Hat Security Advisory: rhc-worker-playbook security update","vulnerabilityIds":["CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810"]},{"id":"RHSA-2026:42050","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.","vulnerabilityIds":["CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-42504"]},{"id":"RHSA-2026:76809","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33376","CVE-2026-33377","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:7291","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-27138","CVE-2026-27139","CVE-2026-27141","CVE-2026-27142","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33810"]},{"id":"RHSA-2026:22958","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.","vulnerabilityIds":["CVE-2026-32280","CVE-2026-33810"]},{"id":"RHSA-2026:39810","title":"Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update","vulnerabilityIds":["CVE-2025-61726","CVE-2025-61729","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33811"]},{"id":"RHSA-2026:19022","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-27137","CVE-2026-33810"]},{"id":"RHSA-2026:19350","title":"Red Hat Security Advisory: git-lfs security update","vulnerabilityIds":["CVE-2024-45341","CVE-2025-4673","CVE-2025-47906","CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810"]},{"id":"RHSA-2026:67134","title":"Red Hat Security Advisory: yggdrasil security update","vulnerabilityIds":["CVE-2026-33810"]},{"id":"RHSA-2026:42049","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.","vulnerabilityIds":["CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-42504"]},{"id":"RHSA-2026:57126","title":"Red Hat Security Advisory: yggdrasil security update","vulnerabilityIds":["CVE-2026-33810"]},{"id":"WID-SEC-W-2026-1006","title":"Golang Go: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810"]},{"id":"RHSA-2026:66327","title":"Red Hat Security Advisory: osbuild-composer security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-41178","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:19721","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-34986"]},{"id":"SUSE-SU-2026:22572-1","title":"Security update for go1.26-openssl","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39819","CVE-2026-39820","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-39836","CVE-2026-42499","CVE-2026-42501","CVE-2026-42504","CVE-2026-42507"]},{"id":"RHSA-2026:67149","title":"Red Hat Security Advisory: git-lfs security update","vulnerabilityIds":["CVE-2026-32281","CVE-2026-33810","CVE-2026-33811","CVE-2026-33818","CVE-2026-39821","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:36796","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update","vulnerabilityIds":["CVE-2025-61729","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33815","CVE-2026-33816","CVE-2026-35469","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:65126","title":"Red Hat Security Advisory: RHOAI 2.25.11 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2025-61729","CVE-2025-67030","CVE-2026-4926","CVE-2026-6734","CVE-2026-9563","CVE-2026-9697","CVE-2026-12151","CVE-2026-12243","CVE-2026-13149","CVE-2026-15075","CVE-2026-15154","CVE-2026-15378","CVE-2026-15581","CVE-2026-16745","CVE-2026-18608","CVE-2026-18611","CVE-2026-18617","CVE-2026-18620","CVE-2026-18621","CVE-2026-25681","CVE-2026-26996","CVE-2026-27136","CVE-2026-27904","CVE-2026-30922","CVE-2026-32283","CVE-2026-33231","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-33870","CVE-2026-33871","CVE-2026-34445","CVE-2026-35536","CVE-2026-39821","CVE-2026-39829","CVE-2026-39835","CVE-2026-40171","CVE-2026-40192","CVE-2026-40895","CVE-2026-41178","CVE-2026-42027","CVE-2026-42215","CVE-2026-42284","CVE-2026-42338","CVE-2026-42502","CVE-2026-42508","CVE-2026-42578","CVE-2026-42579","CVE-2026-42581","CVE-2026-42583","CVE-2026-42584","CVE-2026-42587","CVE-2026-44240","CVE-2026-44244","CVE-2026-44249","CVE-2026-44431","CVE-2026-44893","CVE-2026-45112","CVE-2026-45416","CVE-2026-45623","CVE-2026-45674","CVE-2026-45736","CVE-2026-45819","CVE-2026-47691","CVE-2026-48043","CVE-2026-48059","CVE-2026-48586","CVE-2026-48779","CVE-2026-49978","CVE-2026-50010","CVE-2026-50193","CVE-2026-53550","CVE-2026-54293","CVE-2026-54512","CVE-2026-55685","CVE-2026-55831","CVE-2026-55833","CVE-2026-55851","CVE-2026-56745","CVE-2026-56746","CVE-2026-56819","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-59869","CVE-2026-59873","CVE-2026-59874","CVE-2026-59885","CVE-2026-59899","CVE-2026-66036","CVE-2026-66039","CVE-2026-67313","CVE-2026-67320","CVE-2026-67322","CVE-2026-67323","CVE-2026-67324","CVE-2026-67325","CVE-2026-68494","CVE-2026-69112","CVE-2026-69152","CVE-2026-69192","CVE-2026-69243","CVE-2026-69244","CVE-2026-71281","CVE-2026-73088","CVE-2026-73089","CVE-2026-73415","CVE-2026-73417","CVE-2026-73566","CVE-2026-73622","CVE-2026-73623","CVE-2026-73624","CVE-2026-73625","CVE-2026-73627","CVE-2026-73643"]},{"id":"RHSA-2026:47952","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504"]},{"id":"RHSA-2026:76752","title":"Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update","vulnerabilityIds":["CVE-2025-68121","CVE-2026-25679","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33818","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39835","CVE-2026-41178","CVE-2026-42499","CVE-2026-42504","CVE-2026-46595","CVE-2026-46597","CVE-2026-50162","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-84445"]},{"id":"RHSA-2026:49712","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-27145","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39819","CVE-2026-39820","CVE-2026-39821","CVE-2026-39822","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-42499","CVE-2026-42501","CVE-2026-42504","CVE-2026-42507"]},{"id":"RHSA-2026:21772","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.28.0 Release.","vulnerabilityIds":["CVE-2025-14813","CVE-2025-68121","CVE-2026-0636","CVE-2026-1525","CVE-2026-1526","CVE-2026-1528","CVE-2026-1605","CVE-2026-2229","CVE-2026-2327","CVE-2026-5588","CVE-2026-26996","CVE-2026-27904","CVE-2026-29074","CVE-2026-30827","CVE-2026-31802","CVE-2026-32141","CVE-2026-32280","CVE-2026-32282","CVE-2026-32305","CVE-2026-33252","CVE-2026-33810","CVE-2026-34742","CVE-2026-35051","CVE-2026-39858","CVE-2026-40477","CVE-2026-40478","CVE-2026-40611","CVE-2026-40895","CVE-2026-40912","CVE-2026-40972","CVE-2026-40973","CVE-2026-40975","CVE-2026-41240","CVE-2026-42033","CVE-2026-42035","CVE-2026-42039","CVE-2026-42041","CVE-2026-42043","CVE-2026-42044"]},{"id":"RHSA-2026:67159","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:42051","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.","vulnerabilityIds":["CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-42504"]},{"id":"RHSA-2026:90994","title":"Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-22874","CVE-2025-68121","CVE-2026-27137","CVE-2026-27143","CVE-2026-27144","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-56866","CVE-2026-78659","CVE-2026-78660","CVE-2026-78663","CVE-2026-78667","CVE-2026-78669","CVE-2026-94439","CVE-2026-94440","CVE-2026-94444","CVE-2026-94447","CVE-2026-94448","CVE-2026-97030","CVE-2026-97031","CVE-2026-97032","CVE-2026-111943"]},{"id":"RHSA-2026:40118","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-68121","CVE-2025-69873","CVE-2026-4800","CVE-2026-4926","CVE-2026-6322","CVE-2026-13676","CVE-2026-22029","CVE-2026-25679","CVE-2026-29063","CVE-2026-32141","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33816","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:65880","title":"Red Hat Security Advisory: ignition security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:26568","title":"Red Hat Security Advisory: Red Hat OpenShift API for Data Protection","vulnerabilityIds":["CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33747","CVE-2026-33748","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:19719","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:10158","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.7.2","vulnerabilityIds":["CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-33186","CVE-2026-33211","CVE-2026-33810"]},{"id":"RHSA-2026:88395","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-94440","CVE-2026-97031","CVE-2026-111943"]},{"id":"RHSA-2026:87246","title":"Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-4673","CVE-2025-22866","CVE-2025-22874","CVE-2025-68121","CVE-2026-27137","CVE-2026-27143","CVE-2026-27144","CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33811","CVE-2026-33814","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-56866","CVE-2026-78659","CVE-2026-78660","CVE-2026-78663","CVE-2026-78667","CVE-2026-78669","CVE-2026-94439","CVE-2026-94440","CVE-2026-94444","CVE-2026-94447","CVE-2026-94448","CVE-2026-97030","CVE-2026-97031","CVE-2026-97032","CVE-2026-111943"]},{"id":"RHSA-2026:13545","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update","vulnerabilityIds":["CVE-2025-68121","CVE-2025-69227","CVE-2025-69228","CVE-2026-0598","CVE-2026-4800","CVE-2026-4926","CVE-2026-6266","CVE-2026-12382","CVE-2026-23490","CVE-2026-24049","CVE-2026-25679","CVE-2026-26007","CVE-2026-27137","CVE-2026-27459","CVE-2026-27606","CVE-2026-29074","CVE-2026-30922","CVE-2026-31812","CVE-2026-32274","CVE-2026-32280","CVE-2026-32597","CVE-2026-33154","CVE-2026-33810","CVE-2026-35029","CVE-2026-35030"]},{"id":"RHSA-2026:23345","title":"Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update","vulnerabilityIds":["CVE-2026-4427","CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-27889","CVE-2026-29785","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33215","CVE-2026-33216","CVE-2026-33217","CVE-2026-33218","CVE-2026-33219","CVE-2026-33247","CVE-2026-33413","CVE-2026-33487","CVE-2026-33810","CVE-2026-33813","CVE-2026-33997","CVE-2026-34040","CVE-2026-34986","CVE-2026-40890","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"RHSA-2026:22959","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.","vulnerabilityIds":["CVE-2026-32280","CVE-2026-33186","CVE-2026-33810"]},{"id":"RHSA-2026:22962","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.","vulnerabilityIds":["CVE-2026-32280","CVE-2026-33810"]},{"id":"RHSA-2026:59546","title":"Red Hat Security Advisory: ignition security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-39821"]},{"id":"RHSA-2026:34365","title":"Red Hat Security Advisory: Satellite 6.19.2 Async Update","vulnerabilityIds":["CVE-2026-5135","CVE-2026-5136","CVE-2026-5138","CVE-2026-5142","CVE-2026-25679","CVE-2026-27727","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-40192","CVE-2026-48526"]},{"id":"RHSA-2026:62578","title":"Red Hat Security Advisory: go-fdo-server security update","vulnerabilityIds":["CVE-2026-33810","CVE-2026-33818","CVE-2026-56853","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:70201","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2026-17106","CVE-2026-19730","CVE-2026-33810","CVE-2026-33818","CVE-2026-42499","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:42043","title":"Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.","vulnerabilityIds":["CVE-2026-27145","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33810","CVE-2026-33811","CVE-2026-39821","CVE-2026-42504"]},{"id":"RHSA-2026:26585","title":"Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.15","vulnerabilityIds":["CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:40945","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-61729","CVE-2025-68121","CVE-2025-69873","CVE-2026-4800","CVE-2026-4926","CVE-2026-6322","CVE-2026-13676","CVE-2026-22029","CVE-2026-25679","CVE-2026-29063","CVE-2026-32141","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33816","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:67160","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:56143","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33810","CVE-2026-39821","CVE-2026-42504"]},{"id":"SUSE-SU-2026:1580-1","title":"Security update for go1.26-openssl","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810"]},{"id":"RHSA-2026:88394","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-94440","CVE-2026-97031","CVE-2026-111943"]},{"id":"openSUSE-SU-2026:20703-1","title":"Security update for coredns","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-32934","CVE-2026-32936","CVE-2026-33190","CVE-2026-33489","CVE-2026-33810","CVE-2026-35579"]},{"id":"openSUSE-SU-2026:10525-1","title":"go1.26-1.26.2-1.1 on GA media","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810"]},{"id":"RHSA-2026:19353","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-34986"]},{"id":"RHSA-2026:19720","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-34986"]},{"id":"SUSE-SU-2026:1320-1","title":"Security update for go1.26","vulnerabilityIds":["CVE-2026-27140","CVE-2026-27143","CVE-2026-27144","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33810"]},{"id":"RHSA-2026:67518","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2026-27137","CVE-2026-33376","CVE-2026-33377","CVE-2026-33810","CVE-2026-33818","CVE-2026-42127","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:19135","title":"Red Hat Security Advisory: opentelemetry-collector security update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-34986"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-20024","identifiers":["EUVD-2026-20024","CVE-2026-33810"]},"retained":false,"historicalAffected":[]},{"revision":"ab60d7e12c5c4151bf9f5a74e1c8ad7b","observedAt":"2026-10-25T08:17:24.447+00:00","statement":{"source":"nvd","id":"CVE-2026-33810","aliases":[],"title":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certi…","description":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.","state":0,"publishedAt":"2026-04-08T02:16:03.95+00:00","modifiedAt":"2026-09-18T13:17:56.113+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","score":8.2,"severity":"HIGH"},{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","score":7.5,"severity":"HIGH"},{"system":"CVSS 3.1 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L","score":8.8,"severity":"HIGH"}],"references":["https://go.dev/cl/763763","https://go.dev/issue/78332","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","https://pkg.go.dev/vuln/GO-2026-4866","http://www.openwall.com/lists/oss-security/2026/04/19/4","http://www.openwall.com/lists/oss-security/2026/04/20/1","https://access.redhat.com/errata/RHSA-2026:10155","https://access.redhat.com/errata/RHSA-2026:10158","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:14391","https://access.redhat.com/errata/RHSA-2026:19135","https://access.redhat.com/errata/RHSA-2026:19144","https://access.redhat.com/errata/RHSA-2026:19353","https://access.redhat.com/errata/RHSA-2026:19714","https://access.redhat.com/errata/RHSA-2026:19719","https://access.redhat.com/errata/RHSA-2026:19720","https://access.redhat.com/errata/RHSA-2026:19721","https://access.redhat.com/errata/RHSA-2026:21769","https://access.redhat.com/errata/RHSA-2026:21772","https://access.redhat.com/errata/RHSA-2026:22347","https://access.redhat.com/errata/RHSA-2026:22485","https://access.redhat.com/errata/RHSA-2026:22862","https://access.redhat.com/errata/RHSA-2026:22958","https://access.redhat.com/errata/RHSA-2026:22959","https://access.redhat.com/errata/RHSA-2026:22960","https://access.redhat.com/errata/RHSA-2026:22961","https://access.redhat.com/errata/RHSA-2026:22962","https://access.redhat.com/errata/RHSA-2026:23345","https://access.redhat.com/errata/RHSA-2026:24478","https://access.redhat.com/errata/RHSA-2026:25089","https://access.redhat.com/errata/RHSA-2026:26568","https://access.redhat.com/errata/RHSA-2026:26571","https://access.redhat.com/errata/RHSA-2026:26585","https://access.redhat.com/errata/RHSA-2026:28047","https://access.redhat.com/errata/RHSA-2026:29854","https://access.redhat.com/errata/RHSA-2026:34192","https://access.redhat.com/errata/RHSA-2026:34196","https://access.redhat.com/errata/RHSA-2026:34197","https://access.redhat.com/errata/RHSA-2026:34365","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42043","https://access.redhat.com/errata/RHSA-2026:42047","https://access.redhat.com/errata/RHSA-2026:42049","https://access.redhat.com/errata/RHSA-2026:42050","https://access.redhat.com/errata/RHSA-2026:42051","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49703","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:56143","https://access.redhat.com/errata/RHSA-2026:56223","https://access.redhat.com/errata/RHSA-2026:57126","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:59546","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:61313","https://access.redhat.com/errata/RHSA-2026:61907","https://access.redhat.com/errata/RHSA-2026:62577","https://access.redhat.com/errata/RHSA-2026:62578","https://access.redhat.com/errata/RHSA-2026:63332","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65359","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65880","https://access.redhat.com/errata/RHSA-2026:65895","https://access.redhat.com/errata/RHSA-2026:66327","https://access.redhat.com/errata/RHSA-2026:67134","https://access.redhat.com/errata/RHSA-2026:67149","https://access.redhat.com/errata/RHSA-2026:67159","https://access.redhat.com/errata/RHSA-2026:67160","https://access.redhat.com/errata/RHSA-2026:67517","https://access.redhat.com/errata/RHSA-2026:67518","https://access.redhat.com/errata/RHSA-2026:68334","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:7291","https://access.redhat.com/errata/RHSA-2026:9385","https://access.redhat.com/security/cve/CVE-2026-33810","https://bugzilla.redhat.com/show_bug.cgi?id=2456335","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-33810","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-295","CWE-1289"],"productCriteria":["cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"],"sourceDates":{"published":"2026-04-08T02:16:03.950","lastModified":"2026-09-18T13:17:56.113"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-33810","identifiers":["CVE-2026-33810"]},"retained":false,"historicalAffected":[]},{"revision":"a47cffaa6a754f8bb2449d959d8cda66","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4866","aliases":["BIT-golang-2026-33810","CVE-2026-33810"],"title":"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509","description":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.\n\nThis only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.","state":0,"publishedAt":"2026-04-07T22:53:49+00:00","modifiedAt":"2026-10-14T10:56:59.6453889+00:00","affected":[{"ecosystem":"Go","name":"stdlib","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.26.0-0"},{"kind":"fixed","version":"1.26.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/cl/763763","https://go.dev/issue/78332","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4866","license":"OSV · upstream source license applies","key":"osv:GO-2026-4866","identifiers":["GO-2026-4866","BIT-golang-2026-33810","CVE-2026-33810"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T04:04:18.1997683+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T04:04:18.1997683+00:00","lastSuccessAt":"2026-11-10T04:04:18.3995607+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.3995615+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-81377d708f64394c8eb9b62eea2364ac8dfdeb35ef3610cd5a031d185fc8d86c","complete":true,"records":421867,"lastAttemptAt":"2026-11-10T04:02:14.3050104+00:00","lastSuccessAt":"2026-11-10T04:02:14.2925615+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:02:14.3050104+00:00","snapshotPublishedAt":"2026-11-10T03:29:16+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-a6dc967b5ceb4c488191e8f172ded5d6","complete":true,"records":13689,"lastAttemptAt":"2026-11-10T04:04:46.1001793+00:00","lastSuccessAt":"2026-11-10T03:04:49.903+00:00","error":null,"lastVerifiedAt":"2026-11-10T03:04:49.903+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T04:04:18.1997683+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T04:04:18.1997683+00:00","lastSuccessAt":"2026-11-10T04:04:18.4004514+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.4004518+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-f1b5e07abe344673a8a286f3a893260c","complete":true,"records":13695,"lastAttemptAt":"2026-11-10T04:04:45.5033554+00:00","lastSuccessAt":"2026-11-10T04:04:45.5+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:45.5+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T04:04:18.0453993+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.0453993+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T04:02:14.457245+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:02:14.457245+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-761ecc9061239b0da572dc9254c6f384c1d19339eb08408c436647a2f26129e9","complete":true,"records":3064,"lastAttemptAt":"2026-11-10T04:04:18.158124+00:00","lastSuccessAt":"2026-11-09T17:05:03.4044794+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.158124+00:00","snapshotPublishedAt":"2026-11-09T16:33:20+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-b6d0179d32e97744f004c83c309b7506438ee50743f2ae97e00ea061ef80ca4a","complete":true,"records":231582,"lastAttemptAt":"2026-11-10T04:04:16.4553373+00:00","lastSuccessAt":"2026-11-10T04:04:14.8073774+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:16.4553373+00:00","snapshotPublishedAt":"2026-11-10T03:33:17+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}