Certificate Path Builder Vulnerability in wbond Certvalidator
CVE-2026-109144

6.9MEDIUM

Key Information:

Vendor

Wbond

Status
Certvalidator
Vendor
CVE Published:
13 October 2026

What is CVE-2026-109144?

A vulnerability has been identified in wbond's Certvalidator, specifically in the Certificate Path Builder component. This vulnerability allows for potential remote exploitation, leading to excessive resource consumption. Attackers can manipulate the component to impact the performance and availability of the application. Despite early disclosure attempts to the vendor, there has been no response. Organizations using versions up to 0.11.1 of Certvalidator should be aware of this issue and take necessary precautions.

Affected Version(s)

certvalidator 0.11.0

certvalidator 0.11.1

References

https://vuldb.com/vuln/416883
vdb-entry
https://vuldb.com/vuln/416883/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-109144
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohammedix88 (VulDB User)
VulDB CNA Team
.