CVE-2026-32281

HighCVSS 7.5/10Last modified Jul 25, 2026

Description

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
Go standard library	crypto/x509	< 1.25.9; >= 1.26.0-0, < 1.26.2

References

https://go.dev/cl/758061Patch
https://go.dev/issue/78281Issue Tracking
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWUIssue Tracking, Release Notes
https://pkg.go.dev/vuln/GO-2026-4946Vendor Advisory

Timeline

Published: Apr 8, 2026
Last modified: Jul 25, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-322826.4On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target o CVE-2026-322837.5If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing CVE-2026-322847.5The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This CVE-2026-322857.5The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a r CVE-2026-322867.5The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow messag CVE-2026-322877.5Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be tr CVE-2026-322885.5tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions CVE-2026-322896.1Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when b CVE-2026-32295.5An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was CVE-2026-322904.7The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in CVE-2026-322916.8The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically open CVE-2026-322927.5The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.