VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic
2026-10-19T20:52:01Z•105b8855fa9eb4982b08f6501fd639228373e9dc537d6400f9e7caf34abb6233
CVE-2026-100156CVE-2026-104937CVE-2026-16753CVE-2026-34073CVE-2026-3547CVE-2026-3833CVE-2026-96679CVE-2026-96681account-takeoverauthentication-bypasscertificate-validationcommand-injectioncontainer-managementcredential-theftcross-tenant-accessdata-exfiltratione-commerceidorllm-platformsname-constraintsprivilege-escalationremote-code-executionssrf-like-parser-confusionstored-xsstlsx509
What happened
CERT/CC vulnerability notes describe multiple high-impact issues, including unauthenticated Bisheng administrative account takeover, Komodo Periphery authenticated root-level OS command injection, Lowcoder cross-tenant query and data access, Shopware stored XSS enabling administrator token theft and possible server-side code execution, and several TLS/X.509 Name Constraints inconsistencies across libraries. The most severe items enable administrative compromise, arbitrary command execution, credential theft, or cross-tenant data exfiltration.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certcc_vulnotes
- Record identifier
- 105b8855fa9eb4982b08f6501fd639228373e9dc537d6400f9e7caf34abb6233
- Enrichment time
- 2026-10-19T20:52:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.