CVE-2026-27145

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 6.5EPSS <1%

Published 2026-06-02Updated 2026-06-04

Media 422PoC

Vulnerability details

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

CNAGo

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

CVEShield CVE Organization

Profile

CVSS

6.5

EPSS

<1%

Published

2026-06-02

Updated

2026-06-04

CNA

Vendors

Go standard library

1 product

CPEs

148

cpe:/a:redhat:assisted_installer:2

cpe:/a:redhat:openshift_builds:1

cpe:/a:redhat:cert_manager:1

cpe:/a:redhat:openshift_compliance_operator:1

cpe:/a:redhat:confidential_compute_attestation:1

cpe:/a:redhat:deployment_validator_operator

cpe:/a:redhat:external_secrets_operator:1

cpe:/a:redhat:workload_availability_far:0

cpe:/a:redhat:openshift_file_integrity_operator:1

cpe:/a:redhat:workload_availability_mdr:0

cpe:/a:redhat:rhmt:1

cpe:/a:redhat:multiarch_tuning_operator

cpe:/a:redhat:multicluster_globalhub

cpe:/a:redhat:network_observ_optr:1

cpe:/a:redhat:workload_availability_nhc:0

cpe:/a:redhat:openshift_api_data_protection:1

cpe:/a:redhat:openshift_lightspeed

cpe:/a:redhat:openshift_pipelines:1

cpe:/a:redhat:serverless:1

cpe:/a:redhat:service_mesh:2

cpe:/a:redhat:service_mesh:3

cpe:/a:redhat:source_to_image:1

cpe:/a:redhat:openshift_power_monitoring

cpe:/a:redhat:red_hat_3scale_amp:2

cpe:/a:redhat:acm:2

cpe:/a:redhat:ansible_automation_platform:2

cpe:/a:redhat:ceph_storage:5

cpe:/a:redhat:ceph_storage:6

cpe:/a:redhat:connectivity_link:1

cpe:/a:redhat:rhdh:1

cpe:/a:redhat:edge_manager:1

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:enterprise_linux_ai:3

cpe:/a:redhat:hummingbird:1

cpe:/a:redhat:lightspeed_for_runtimes:1

cpe:/a:redhat:openshift_ai

cpe:/a:redhat:openshift_cluster_manager_cli:1

cpe:/a:redhat:openshift:4

cpe:/a:redhat:devworkspace

cpe:/a:redhat:openshift_service_on_aws:1

cpe:/a:redhat:container_native_virtualization:4

cpe:/a:redhat:openstack:16.2

cpe:/a:redhat:openstack:17.1

cpe:/a:redhat:openstack:18.0

cpe:/a:redhat:satellite:6

cpe:/a:redhat:trusted_artifact_signer:1

cpe:/a:redhat:webterminal:1

cpe:/a:redhat:openshift_security_profiles_operator:1

cpe:/a:redhat:amq_streams:2

cpe:/a:redhat:amq_streams:3

cpe:/a:redhat:zero_trust_workload_identity_manager:1

cpe:/a:redhat:zero_trust_workload_identity_manager:0

cpe:/a:redhat:cryostat:4

cpe:/a:redhat:openshift_custom_metrics_autoscaler:2

cpe:/a:redhat:gatekeeper:3

cpe:/a:redhat:logging:6

cpe:/a:redhat:lvms:4

cpe:/a:redhat:migration_toolkit_applications:8

cpe:/a:redhat:mirror_registry:2

cpe:/a:redhat:multicluster_engine

cpe:/a:redhat:ocp_tools

cpe:/a:redhat:advanced_cluster_security:4

cpe:/a:redhat:ceph_storage:7

cpe:/a:redhat:ceph_storage:8

cpe:/a:redhat:ceph_storage:9

cpe:/a:redhat:openshift_data_foundation:4

cpe:/a:redhat:openshift_devspaces:3

cpe:/a:redhat:openshift_distributed_tracing:3

cpe:/a:redhat:windows_machine_config

cpe:/a:redhat:openshift_gitops:1

cpe:/a:redhat:quay:3

cpe:/a:redhat:service_interconnect:2

cpe:/a:redhat:stf:1.5

cpe:/a:redhat:rhdh:1.9::el9

cpe:/o:redhat:enterprise_linux:10.2

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:openshift_builds:1.7::el9

cpe:/a:redhat:trusted_artifact_signer:1.4::el9

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:enterprise_linux:8

cpe:/a:redhat:enterprise_linux:9

cpe:/a:redhat:multicluster_globalhub:1.4::el9

cpe:/a:redhat:openshift_builds:1.8::el9

cpe:/a:redhat:ansible_automation_platform:2.6::el10

cpe:/a:redhat:ansible_automation_platform:2.6::el9

cpe:/a:redhat:ansible_automation_platform:2.7::el10

cpe:/a:redhat:ansible_automation_platform:2.7::el9

cpe:/a:redhat:satellite:6.16::el8

cpe:/a:redhat:satellite:6.16::el9

cpe:/a:redhat:satellite:6.17::el9

cpe:/a:redhat:satellite:6.18::el9

cpe:/a:redhat:satellite:6.19::el9

cpe:/a:redhat:openshift_ai:2.25::el9

cpe:/a:redhat:webterminal:1.11::el9

cpe:/a:redhat:webterminal:1.12::el9

cpe:/a:redhat:webterminal:1.13::el9

cpe:/a:redhat:webterminal:1.14::el9

cpe:/a:redhat:webterminal:1.15::el9

cpe:/a:redhat:multicluster_globalhub:1.6::el9

cpe:/a:redhat:multicluster_engine:2.8::el9

cpe:/a:redhat:multicluster_globalhub:1.7::el9

cpe:/a:redhat:acm:2.13::el9

cpe:/o:redhat:enterprise_linux_eus:10.0

cpe:/a:redhat:service_mesh:3.0::el9

cpe:/a:redhat:service_mesh:3.2::el9

cpe:/a:redhat:service_mesh:3.4::el9

cpe:/a:redhat:ansible_automation_platform:2.5::el8

cpe:/a:redhat:ansible_automation_platform:2.5::el9

cpe:/a:redhat:openshift_distributed_tracing:3.10::el9

cpe:/a:redhat:service_mesh:3.1::el9

cpe:/a:redhat:service_mesh:3.3::el9

cpe:/a:redhat:source_to_image:1.6::el8

cpe:/a:redhat:multicluster_globalhub:1.8::el9

cpe:/o:redhat:rhel_els:7

cpe:/a:redhat:rhel_e4s:9.4

cpe:/a:redhat:rhel_eus:9.6

cpe:/a:redhat:openstack:16.2::el8

cpe:/a:redhat:amq_streams:3.2::el9

cpe:/a:redhat:cert_manager:1.19::el9

cpe:/a:redhat:external_secrets_operator:1.1::el9

cpe:/a:redhat:multicluster_engine:2.10::el9

cpe:/a:redhat:openshift_compliance_operator:1::el9

cpe:/a:redhat:acm:2.15::el9

cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9

cpe:/a:redhat:openshift:4.21::el9

cpe:/a:redhat:webterminal:1.16::el9

cpe:/a:redhat:multicluster_engine:2.11::el9

cpe:/a:redhat:multicluster_engine:2.17::el9

cpe:/a:redhat:multicluster_engine:2.6::el9

cpe:/a:redhat:multicluster_engine:2.9::el9

cpe:/a:redhat:rhel_e4s:9.2

cpe:/a:redhat:openshift:4.18::el8

cpe:/a:redhat:acm:2.17::el9

cpe:/a:redhat:openshift:4.18::el9

cpe:/a:redhat:acm:2.11::el9

cpe:/a:redhat:acm:2.14::el9

cpe:/a:redhat:acm:2.16::el9

cpe:/a:redhat:cluster_observability_operator:1.5::el9

cpe:/a:redhat:openshift:4.17::el9

cpe:/a:redhat:ext_dns_optr:1

cpe:/a:redhat:openshift_api_data_protection:1.5::el9

cpe:/a:redhat:edge_manager:1.1::el10

cpe:/a:redhat:edge_manager:1.1::el9

cpe:/a:redhat:edge_manager:1.2::el10

cpe:/a:redhat:edge_manager:1.2::el9

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated