Skip to content

CyberSIXT Search

Go standard library product

crypto/x509

← All Go standard library products

No crypto/x509 CVE is in the CISA KEV catalogue. Coverage is above its usual rate: 3 articles in 7 days, against a weekly average of 0.0.

Tracked since 20 Oct · latest article Wed 21 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 3; ↑ vs 0.0 a week

Exploited, by due date

No crypto/x509 CVE is in the CISA KEV catalogue.

Coverage

3 articles · all timeFull timeline →

3 articles in the last 7 days. The weekly average over the 8 weeks before was 0.0.

Three articles so far, 20 Oct to 21 Oct.

Tue 20 Oct · first reportBrowsers Block Eight Compromised eMudhra Certificate Authority KeysThe Hacker News
Wed 21 OctMozilla Blocks Weak eMudhra Keys That Could Enable Website ImpersonationSecurityOnline
Wed 21 OctWeak eMudhra CA Keys Let Attackers Forge Trusted TLS CertificatesSOCRadar

See the full timeline

21 OctWeak eMudhra CA Keys Let Attackers Forge Trusted TLS CertificatesSOCRadar
21 OctMozilla Blocks Weak eMudhra Keys That Could Enable Website ImpersonationSecurityOnline
20 OctBrowsers Block Eight Compromised eMudhra Certificate Authority KeysThe Hacker News

All CVEs in coverage

1

CVE-2026-111943Distrust compromised intermediate certificates in crypto/x509CVSSUnrated–Not in KEV0.3%EPSS3articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.