CVE-2026-6899

Medium

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto…

GitLab·CWE-299·Published 2026-06-09

CVSS

5.6

EPSS

0.00

KEV

Exploits

cve.orgen

266 chars

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate.

NVDen

266 chars

NVDes

300 chars

La verificación de revocación de certificados solo considera la primera CRL coincidente e ignora otras CRL válidas de la misma CA en el envoltorio criptográfico CycloneCrypto de la biblioteca S2OPC. Podría permitir la conexión entre un cliente OPC UA y un servidor utilizando un certificado revocado.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.6	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
3.1	Secondary	NVD	5.6	2.2	3.4	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L