Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-27145

37
FAUCET Score

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

First published: Jun 2, 2026Last modified: Jun 2, 2026

Impacted Technologies

VendorProductVersion(s)CPE
Go Standard LibraryCrypto/X509
>= 0, < 1.25.11, >= 1.26.0-0, < 1.26.4CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
4.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.59%
Probability of exploitation in next 30 days
EPSS Percentile
44.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0059 is in the 22nd percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

microsoft2026-Jun/CVE-2026-27145Moderate

Inefficient candidate hostname parsing in crypto/x509

Jun 4, 2026

References

access.redhat.com / errata/RHSA-2026:23262
access.redhat.com / errata/RHSA-2026:23264
access.redhat.com / errata/RHSA-2026:29981
access.redhat.com / errata/RHSA-2026:33574
access.redhat.com / errata/RHSA-2026:34357
access.redhat.com / errata/RHSA-2026:34359
access.redhat.com / errata/RHSA-2026:35832
access.redhat.com / errata/RHSA-2026:36317
access.redhat.com / errata/RHSA-2026:36648
access.redhat.com / errata/RHSA-2026:36797
access.redhat.com / errata/RHSA-2026:38995
access.redhat.com / errata/RHSA-2026:39005
access.redhat.com / errata/RHSA-2026:39573
access.redhat.com / errata/RHSA-2026:39879
access.redhat.com / errata/RHSA-2026:41030
access.redhat.com / errata/RHSA-2026:41036
access.redhat.com / errata/RHSA-2026:41930
access.redhat.com / errata/RHSA-2026:42043
access.redhat.com / errata/RHSA-2026:42047
access.redhat.com / errata/RHSA-2026:42049
access.redhat.com / errata/RHSA-2026:42050
access.redhat.com / errata/RHSA-2026:42051
access.redhat.com / errata/RHSA-2026:42079
access.redhat.com / errata/RHSA-2026:42080
access.redhat.com / errata/RHSA-2026:42082
access.redhat.com / errata/RHSA-2026:42142
access.redhat.com / errata/RHSA-2026:42150
access.redhat.com / errata/RHSA-2026:42151
access.redhat.com / errata/RHSA-2026:42240
access.redhat.com / errata/RHSA-2026:42644
access.redhat.com / errata/RHSA-2026:42946
access.redhat.com / security/cve/CVE-2026-27145
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-27145.json
go.dev / cl/783621
go.dev / issue/79694
groups.google.com / g/golang-announce/c/tKs3rmcBcKw
pkg.go.dev / vuln/GO-2026-5037