Vulnerability Description
An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://gitcode.com/openHiTLS/openhitls/pull/1399
- https://gitcode.com/openHiTLS/openhitls/pull/1657
- https://github.com/openHiTLS/openHiTLS/commit/2d3b221d113b452bc197012b185978b831
- https://github.com/openHiTLS/openHiTLS/commit/4355cdf5b043d5b9ef698f8f57860f77f8
- https://github.com/openHiTLS/openHiTLS/compare/openhitls-0.3.2...openhitls-0.3.3
- https://www.openhitls.net/zh/support/HTLS-2026-001.html
FAQ
What is CVE-2026-57826?
CVE-2026-57826 is a vulnerability with a CVSS score of 6.8 (MEDIUM). An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for ...
How severe is CVE-2026-57826?
CVE-2026-57826 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-57826?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.