CVE-2026-117666 — ssl_verify_fun: partial-label wildcard certificates match hostnames across a label boundary

CVE-2026-117666 concerns ssl_verify_fun behavior in which partial-label wildcard certificates match hostnames across a label boundary. The vulnerability is associated with CWE-297: improper validation of a certificate with a host mismatch.