CVE-2026-6731 describes a vulnerability where X.509 certificate name constraints can be bypassed through the Subject Common Name field when it is interpreted as a DNS-type name. This means that certificates with Subject CN values that violate the DNS name constraints imposed by the issuing CA might be accepted by clients or systems that do not properly enforce these constraints. The vulnerability is categorized under CWE-295 (Improper Certificate Validation). No patch or remediation information is provided, and no known exploits are reported in the wild.

The impact is that systems relying on X.509 name constraints to restrict acceptable DNS names in certificates may incorrectly accept certificates that violate these constraints. This could undermine trust in the certificate validation process, potentially allowing unauthorized certificates to be accepted. However, no known exploits are reported, and the severity is rated as medium/moderate.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor vendor advisories for updates. Until a fix is available, careful validation of certificates and additional controls around certificate acceptance may help mitigate risk.