CVE WATCH / VULNERABILITY DETAIL

CVE-2026-91769

MEDIUMCVSS 4.3NVD feed

Published 25 September 2026 · tracked since 26 September 2026

Description

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN was

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools

CVE-2026-91769 — Vulnerability Details | Logic Encoder
CVE WATCH / VULNERABILITY DETAIL

CVE-2026-91769

MEDIUMCVSS 4.3NVD feed

Published 25 September 2026 · tracked since 26 September 2026

Description

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN was

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools

[an error occurred while processing this directive]