CRITICALCVSS 9.1

CVE-2026-42508

CVE-2026-42508 updated by NVD

Modified: 2026-08-26
Sources: nvd

Summary

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-42508

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.