THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-42789 (MEDIUM 4.8) — Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery. In lib/public_key/src/pubkey_cert.erl, pubkey_cert:validate_

[NVD] CVE-2026-42789 (MEDIUM 4.8) — Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery. In lib/public_key/src/pubkey_cert.erl, pubkey_cert:validate_

lownvdPublished 2026-05-27

CVE-2026-42789 CVSS: 4.8 MEDIUM Published: 2026-05-27T14:16:53.267

Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery.

In lib/public_key/src/pubkey_cert.erl, pubkey_cert:validate_extensions/7 contains two flaws that together allow

Indicators of compromise

CVE-2026-42789cve
28.5.0.1ipv4
27.3.4.12ipv4
26.2.5.21ipv4
1.20.3.1ipv4
1.17.1.3ipv4
1.15.1.7ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-42789