CVE-2026-6899
Medium · 5.6CVSS
5.6
EPSS
0.2%
Published
Jun 9, 2026
CISA due date
—
The record
Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86231 A security flaw has been discovered in mwiede jsch up to 2.28.5. CWE-299
- CVE-2026-61699 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-299
- CVE-2026-56821 Netty is an asynchronous, event-driven network application framework. CWE-299
- CVE-2026-4428 A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes… CWE-299
- CVE-2025-11955 Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5… CWE-299