Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceCVE-2026-3336

CVE-2026-3336

HIGH8.7

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Published Mar 2, 2026

Modified Yesterday

Details

Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer.

Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

References

ADVISORY

https://aws.amazon.com/security/security-bulletins/2026-005-AWS/

FIX

https://github.com/aws/aws-lc/releases/tag/v1.69.0

ADVISORY

https://github.com/aws/aws-lc/security/advisories/GHSA-cfwj-9wp5-wqvp

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-3336

CVSS Analysis

CVSS v4.0

8.7

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Attack Requirements

NoneAT:N

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

NoneVC:N

Vuln. Integrity

HighVI:H

Vuln. Availability

NoneVA:N

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

8.7/CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Weakness Type (CWE)

Cryptography

CWE-295

Improper Certificate Validation

Ecosystems

Timeline

PublishedMar 2, 2026

ModifiedMar 3, 2026

CVE-2026-3336 | Mondoo Vulnerability Intelligence