PT-2026-23662 · Amazon Web Services+1 · Aws-Lambda+1

Jakub Ciolek · CVE-2026-27137 · Published 2026-03-06 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AWS Lambda (affected versions not specified)

Description A flaw exists in AWS Lambda base images utilizing stdlib. Specifically, when validating a certificate chain with multiple email address constraints that share common local portions but differ in domain portions, the constraints are not correctly applied. Only the last constraint in the chain is considered during verification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

ALSA-2026:19022

ALSA-2026:19181

ALSA-2026:8842

AZL-79613

AZL-79628

BDU:2026-04124

BIT-GOLANG-2026-27137

CLEANSTART-2026-AB43319

CLEANSTART-2026-AT12816

CLEANSTART-2026-BC17682

CLEANSTART-2026-BH97849

CLEANSTART-2026-FM44162

CLEANSTART-2026-FP26400

CLEANSTART-2026-GI67088

CLEANSTART-2026-GM63718

CLEANSTART-2026-GQ03231

CLEANSTART-2026-HA09227

CLEANSTART-2026-HJ72983

CLEANSTART-2026-HO16255

CLEANSTART-2026-JM96857

CLEANSTART-2026-JV11945

CLEANSTART-2026-KF61159

CLEANSTART-2026-KL41807

CLEANSTART-2026-KO23583

CLEANSTART-2026-KR58137

CLEANSTART-2026-KY82666

CLEANSTART-2026-LA67881

CLEANSTART-2026-LA96053

CLEANSTART-2026-LC57158

CLEANSTART-2026-MA49342

CLEANSTART-2026-MX70474

CLEANSTART-2026-OK95571

CLEANSTART-2026-ON62368

CLEANSTART-2026-PS51260

CLEANSTART-2026-PX55932

CLEANSTART-2026-QO29688

CLEANSTART-2026-RF77222

CLEANSTART-2026-RR25843

CLEANSTART-2026-RY70255

CLEANSTART-2026-SP88135

CLEANSTART-2026-SR26977

CLEANSTART-2026-TC31671

CLEANSTART-2026-TM31143

CLEANSTART-2026-UG20989

CLEANSTART-2026-UI21589

CLEANSTART-2026-UR38994

CLEANSTART-2026-UY60586

CLEANSTART-2026-VH00240

CLEANSTART-2026-VN16911

CLEANSTART-2026-WE55349

CLEANSTART-2026-XJ06210

CLEANSTART-2026-XN09779

CLEANSTART-2026-XP01012

CLEANSTART-2026-XP87197

CLEANSTART-2026-YB46455

CLEANSTART-2026-YN56551

CLEANSTART-2026-YS46680

CLEANSTART-2026-ZM74354

CLEANSTART-2026-ZU45532

CVE-2026-27137

GO-2026-4599

OPENSUSE-SU-2026:10299-1

OPENSUSE-SU-2026:10909-1

OPENSUSE-SU-2026:20342-1

OPENSUSE-SU-2026:20537-1

RHSA-2026:10169

RHSA-2026:10929

RHSA-2026:19022

RHSA-2026:19049

RHSA-2026:19132

RHSA-2026:19181

RHSA-2026:22450

RHSA-2026:22714

RHSA-2026:22937

RHSA-2026:23228

RHSA-2026:28038

RHSA-2026:28047

RHSA-2026:36796

RHSA-2026:39810

RHSA-2026:41019

RHSA-2026:7291

RHSA-2026:8842

SUSE-SU-2026:0876-1

SUSE-SU-2026:0976-1

SUSE-SU-2026:0993-1

SUSE-SU-2026:1042-1

SUSE-SU-2026:21195-1

Affected Products

Aws-Lambda

Rocky Linux

References · 611

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27137.json · Exploit
• https://access.redhat.com/errata/RHSA-2026:22450 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-KY82666 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:22347 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-19022.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24051 · Security Note
• https://errata.rockylinux.org/RLSA-2026:22714 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39820 · Security Note
• https://access.redhat.com/errata/RHSA-2026:19132 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:19022 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:22937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32289 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-GQ03231 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:8842 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10299-1 · Vendor Advisory