CVE-2026-6450: CRL critical extension bypass in ParseCRL_Extensions
Published Jun 25, 2026
·Updated
A CRL critical extension bypass exists in ParseCRLExtensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted. This only affects builds with CRL support enabled and where a crafted CRL had a trusted signature when parsed.
Affected Software
2 affected components
OpenSSL ParseCRL_Extensions
wolfSSL wolfssl>=4.3.0<5.9.2
Remediation
Patch Available
Event History
Jun 25, 2026
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
DescriptionWeakness
Data Sourced
via NVD·09:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-6450?
The severity of CVE-2026-6450 is classified as low.
2
How do I fix CVE-2026-6450?
You can fix CVE-2026-6450 by applying the available patch.
3
What type of vulnerability is CVE-2026-6450?
CVE-2026-6450 is a CRL critical extension bypass vulnerability.
4
Which software is affected by CVE-2026-6450?
CVE-2026-6450 affects OpenSSL's ParseCRL_Extensions and wolfSSL.
5
When was CVE-2026-6450 published?
CVE-2026-6450 was published on June 25, 2026.