CVE-2026-89134Suited to automated attack · CISA
Subject CN name-constraint check bypassed when non-DNS SAN present
CVSS score
6.3
EPSS probability
%0.2
Risk score
0.0
Published
15 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.3
CVE-2026-89136
Client accepts unsolicited RawPublicKey server certificate type
W
Patch status unknownEPSS %1
7.4
CVE-2026-81020
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
7.4
CVE-2026-81019
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
WI
Patch status unknownEPSS %0
6.5
CVE-2025-11933
Improper input validation in Wolfssl
W
Patch verifiedEPSS %0
7.7
CVE-2026-83540
wolfSSHd on Windows race condition leading to logon token reused across connections
W
Patch verifiedEPSS %0
7.5
CVE-2026-7532
Improper certificate validation in Wolfssl
W
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-89134"