corpus.blog
43,771 blogs · 5,563,491 posts Claim your blog
Record · corpus.blog/posts/01a08769-ba46-717b-b747-057abdae9127

CVE-2026-14440: When Cloudflare Universal SSL Makes Strict CAA Controls Disappear

doi.org · published 31 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at doi.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
72
Words captured
6,645

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.cve.org/CVERecord?id=CVE-2026-14440
cve.org
https://notcve.org/view.php?id=NotCVE-2026-0001
notcve.org
https://www.wikidata.org/entity/Q140402353
wikidata.org
https://github.com/advisories/GHSA-vrv9-rjp4-w93c
github.com
https://cwe.mitre.org/data/definitions/693.html
cwe.mitre.org
https://www.youtube.com/watch?v=w09rF75f_vo
youtube.com
https://fearsoff.com
fearsoff.com
https://community.cloudflare.com/t/universal-ssl-exposes-domains-to-bgp-leaks-re-venezuela-analysis/879930
community.cloudflare.com
https://www.jabber.ru/
jabber.ru
https://en.wikipedia.org/wiki/Let%27s_Encrypt
en.wikipedia.org
https://en.wikipedia.org/wiki/Transport_Layer_Security
en.wikipedia.org
https://en.wikipedia.org/wiki/Border_Gateway_Protocol
en.wikipedia.org
https://en.wikipedia.org/wiki/Product_manager
en.wikipedia.org
https://henrybirgelee.com/
henrybirgelee.com
https://web.archive.org/web/20251130143159/https://www.statista.com/chart/35487/market-share-of-reverse-proxy-services-cloudflare/
web.archive.org
https://www.statista.com/chart/35487/market-share-of-reverse-proxy-services-cloudflare/
statista.com
https://www.statista.com/chartoftheday/
statista.com
https://community.cloudflare.com/t/critical-security-gap-cloudflare-must-fully-support-rfc-8657-caa/799999
community.cloudflare.com
https://notes.valdikss.org.ru/jabber.ru-mitm/
notes.valdikss.org.ru
https://doi.org/10.17487/RFC8659
doi.org
https://doi.org/10.17487/RFC8446
doi.org
https://doi.org/10.17487/RFC9000
doi.org
https://doi.org/10.17487/RFC6844
doi.org
https://doi.org/10.17487/RFC8657
doi.org
[Computing] Mitigating the Hetzner/Linode XMPP.ru MitM interception incident Read at the source ↗
devever.net
https://letsencrypt.org/docs/challenge-types/
letsencrypt.org
https://www.usenix.org/conference/usenixsecurity18/presentation/birge-lee
usenix.org
https://developers.cloudflare.com/ssl/edge-certificates/caa-records/
developers.cloudflare.com
https://developers.cloudflare.com/ssl/edge-certificates/universal-ssl/disable-universal-ssl/
developers.cloudflare.com
https://developers.cloudflare.com/ssl/edge-certificates/advanced-certificate-manager/
developers.cloudflare.com
https://developers.cloudflare.com/ssl/edge-certificates/custom-certificates/
developers.cloudflare.com
https://developers.cloudflare.com/ssl/reference/all-features/
developers.cloudflare.com
https://community.cloudflare.com/t/cloudflare-nameservers-ignore-caa-record-validationmethods-and-accounturi/758109
community.cloudflare.com
https://vercel.com/docs/domains/working-with-dns
vercel.com
https://docs.aws.amazon.com/acm/latest/userguide/setup.html
docs.aws.amazon.com
https://docs.cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs
docs.cloud.google.com
https://support.dnsimple.com/articles/caa-record-format/
support.dnsimple.com
https://aws.amazon.com/about-aws/whats-new/2017/08/amazon-route-53-now-supports-caa-records/
aws.amazon.com
https://en.wikipedia.org/wiki/DigiNotar
en.wikipedia.org
https://sslmate.com/resources/certificate_authority_failures
sslmate.com
https://www.mike-gualtieri.com/posts/chaining-remote-web-vulnerabilities-to-abuse-lets-encrypt
mike-gualtieri.com
https://habr.com/ru/articles/918570/
habr.com
https://blog.cloudflare.com/why-certificate-pinning-is-outdated/
blog.cloudflare.com
https://community.cloudflare.com/t/cloudflare-nameservers-ignore-caa-record-validationmethods-and-accounturi/758109/2
community.cloudflare.com
https://secure-certificates.princeton.edu/cryptographic-domain-validation.pdf
secure-certificates.princeton.edu
https://doi.org/10.48550/arXiv.2302.08000
doi.org
https://doi.org/10.1145/3730567.3764495
doi.org
https://cabforum.org/working-groups/server/baseline-requirements/requirements/
cabforum.org
https://letsencrypt.org/docs/caa/
letsencrypt.org
https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/
blog.mozilla.org
https://cabforum.org/2024/08/05/ballot-sc067v3-require-domain-validation-and-caa-checks-to-be-performed-from-multiple-network-perspectives-corroboration
cabforum.org
https://blog.cloudflare.com/introducing-tls-1-3/
blog.cloudflare.com
https://blog.cloudflare.com/head-start-with-quic/
blog.cloudflare.com
https://datatracker.ietf.org/doc/draft-ietf-acme-dns-persist/
datatracker.ietf.org
https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/WNGFxQjPkPY
groups.google.com
https://www.digicert.com/blog/a-new-dns-validation-method
digicert.com
https://community.letsencrypt.org/t/issue-certificates-only-to-specific-agent-keys/184283
community.letsencrypt.org
https://answers.netlify.com/t/lets-encrypt-accounturi-for-caa-record/103453
answers.netlify.com
https://googlechrome.github.io/chromerootprogram/
googlechrome.github.io
https://pki.goog/repo/cps/5.22/GTS-CPS.html
pki.goog
https://datatracker.ietf.org/doc/draft-ietf-tls-esni/25/
datatracker.ietf.org
https://blog.cloudflare.com/encrypted-client-hello/
blog.cloudflare.com
https://w3techs.com/technologies/overview/proxy/
w3techs.com
https://w3techs.com/technologies/details/cn-cloudflare
w3techs.com
https://blog.cloudflare.com/bgp-route-leak-venezuela/
blog.cloudflare.com
https://docs.netlify.com/domains-https/https-ssl/
docs.netlify.com
https://community.letsencrypt.org/t/prod-support-for-rfc8657-caa-constraints-for-accounturi-and-validationmethods/181584
community.letsencrypt.org
https://acme-lecaa.charlotte.edu/
acme-lecaa.charlotte.edu
https://nvd.nist.gov/vuln/detail/CVE-2026-14440
nvd.nist.gov
https://blog.cloudflare.com/acme-path-vulnerability/
blog.cloudflare.com
https://developers.cloudflare.com/ssl/edge-certificates/additional-options/certificate-transparency-monitoring/
developers.cloudflare.com
https://www.rfc-editor.org/rfc/rfc6962.html
rfc-editor.org
Elsewhere on doi.org (3)