[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-16 04:43 UTC
Importiert: 2026-07-23 03:15 UTC
CVSS: 7.6
Quelle-ID: full_disc
uid_hash: f1a35f5b7573717813ed5c8cd829ea028d47169a68c5d078c7e13a7896f14fd6

Full Disclosure

NotCVE Disclosure Update — NotCVE-2026-0001 / CVE-2026-14440

[-] Summary:

On 2026-01-19 the issue described below was published as NotCVE-2026-0001

after no CVE identifier was assigned for it. On 2026-07-01 — 163 days

later — Cloudflare assigned CVE-2026-14440 to the same issue, now...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-14440	HIGH	7.6	HIGH	7.6			2026-07-01

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss