Skip to main content

CVE-2026-33810

CVE Details

Visit the official vulnerability details page for CVE-2026-33810 to learn more.

Initial Publication

04/08/2026

Last Update

04/20/2026

Third Party Dependency

go

NIST CVE Summary

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

CVE Severity

7.5

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Modified

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.