CVE-2026-63576

Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc.

Bc-Csharp

Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordinate CA, or anyone able to obtain certificates with chosen subjectAltName URIs from such a CA, to bypass permitted or excluded uniformResourceIdentifier name constraints during certification path validation via a URI whose path, query, fragment or userinfo contains characters such as '@' or ':'…

2. Okt 2026

Ausgewertete Quellen

• NVD
  CVE-2026-63576
• GitHub
  https://github.com/bcgit/bc-csharp/wiki/CVE-2026-63576