# CVE-2026-32280

## Summary

- **CVE ID:** CVE-2026-32280
- **Severity:** UNKNOWN
- **CVSS Score:** 0.03 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** N/A
- **Published:** Apr 8, 2026
- **Last Modified:** Sep 17, 2026

## Description

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

## Affected Products

- Go standard library — crypto/x509 (0)
- Go standard library — crypto/x509 (1.26.0-0)

## References

- [CNA](https://go.dev/cl/758320)
- [CNA](https://go.dev/issue/78282)
- [CNA](https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU)
- [CNA](https://pkg.go.dev/vuln/GO-2026-4947)
- [redhat-SADP](https://access.redhat.com/security/cve/CVE-2026-32280)
- [redhat-SADP](https://bugzilla.redhat.com/show_bug.cgi?id=2456339)
- [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24762)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16101)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24761)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21655)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25180)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27076)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14391)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28047)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23244)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20569)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23103)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19715)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16024)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19550)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:18032)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:18027)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17084)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19719)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19750)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20570)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22713)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19714)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20571)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19450)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10217)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29195)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23102)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19133)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22141)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19144)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19135)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24470)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22130)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29035)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24716)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10704)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16875)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11507)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11514)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:15980)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19634)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19721)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20607)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20608)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19722)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16021)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20556)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19839)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28038)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19720)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22709)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17287)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24337)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20609)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14200)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10219)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29455)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29703)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19350)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19353)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26447)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22309)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29702)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28074)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26636)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25089)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26585)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22862)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22347)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21769)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23345)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16874)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29854)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26568)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26571)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25127)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13829)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20889)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13791)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13545)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21338)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13826)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22485)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24977)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24359)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21772)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11688)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16476)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16477)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16534)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16505)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16532)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16508)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16535)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16537)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16542)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14162)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9385)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14020)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21017)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24853)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19375)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22465)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22840)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23361)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24478)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22960)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22958)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22962)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22959)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22961)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28441)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22422)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22268)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22415)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28198)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28196)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22258)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22260)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33722)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28886)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34365)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34192)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34196)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34197)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28961)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36319)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34097)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36796)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36651)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39810)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39894)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40118)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41019)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40945)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41928)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42043)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42047)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42050)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42051)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42049)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47719)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47722)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47721)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:48036)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47712)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47714)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47716)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47910)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47952)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49526)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:48790)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49600)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49509)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49944)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49838)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51033)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51288)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54191)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54757)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36625)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25252)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25251)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25248)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25253)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25250)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54603)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56789)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56785)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56910)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56852)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57482)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56913)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56912)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56855)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57488)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57409)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60520)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61907)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61906)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61685)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59833)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59830)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60018)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59834)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65534)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65886)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66401)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67319)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65838)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68504)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.61%
- **EPSS Percentile:** 47.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._