CVE-2026-25793: Nebula Ecdsa Fingerprint Malleability Bypasscve-2026-25793-nebula-ecdsa-fingerprint-malleability-bypass
Certificate verification does not account for alternate fingerprints generated by ECDSA signature malleability (high-S/low-S forms). An attacker can alter the signature to its alternate valid form, changing its fingerprint without affecting signature validity, and thus bypass a fingerprint-based blocklist.