CVE-2026-6450

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A critical extension bypass exists in the ParseCRL Extensions() function. The issue occurs when critical extensions in a Certificate Revocation List (CRL)—a list of digital certificates that have been revoked by the issuing authority—are not properly enforced. This allows a crafted CRL containing an unhandled critical extension to be accepted, provided the CRL has a trusted signature and CRL support is enabled in the build.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.