CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-32253

Sunshine is a self-hosted game stream host for Moonlight. In versions prior to 2026.516.143833, the client-certificate authentication can be bypassed because of how OpenSSL verification results are handled. In src/crypto.cpp, the custom verify callback treats X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY, X509_V_ERR_CERT_NOT_YET_VALID, and X509_V_ERR_CERT_HAS_EXPIRED as success. This can allow an untrusted certificate to pass authentication and access protected HTTPS endpoints. This issue has been fixed in version 2026.516.143833.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.7%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2026-32253

Lizardbyte » Sunshine » Version: 0.1.0

cpe:2.3:a:lizardbyte:sunshine:0.1.0
Lizardbyte » Sunshine » Version: 0.1.1

cpe:2.3:a:lizardbyte:sunshine:0.1.1
Lizardbyte » Sunshine » Version: 0.10.0

cpe:2.3:a:lizardbyte:sunshine:0.10.0
Lizardbyte » Sunshine » Version: 0.10.1

cpe:2.3:a:lizardbyte:sunshine:0.10.1
Lizardbyte » Sunshine » Version: 0.11.0

cpe:2.3:a:lizardbyte:sunshine:0.11.0
Lizardbyte » Sunshine » Version: 0.11.1

cpe:2.3:a:lizardbyte:sunshine:0.11.1
Lizardbyte » Sunshine » Version: 0.12.0

cpe:2.3:a:lizardbyte:sunshine:0.12.0
Lizardbyte » Sunshine » Version: 0.13.0

cpe:2.3:a:lizardbyte:sunshine:0.13.0
Lizardbyte » Sunshine » Version: 0.14.0

cpe:2.3:a:lizardbyte:sunshine:0.14.0
Lizardbyte » Sunshine » Version: 0.14.1

cpe:2.3:a:lizardbyte:sunshine:0.14.1
Lizardbyte » Sunshine » Version: 0.15.0

cpe:2.3:a:lizardbyte:sunshine:0.15.0
Lizardbyte » Sunshine » Version: 0.16.0

cpe:2.3:a:lizardbyte:sunshine:0.16.0
Lizardbyte » Sunshine » Version: 0.17.0

cpe:2.3:a:lizardbyte:sunshine:0.17.0
Lizardbyte » Sunshine » Version: 0.18.0

cpe:2.3:a:lizardbyte:sunshine:0.18.0
Lizardbyte » Sunshine » Version: 0.18.1

cpe:2.3:a:lizardbyte:sunshine:0.18.1
Lizardbyte » Sunshine » Version: 0.18.2

cpe:2.3:a:lizardbyte:sunshine:0.18.2
Lizardbyte » Sunshine » Version: 0.18.3

cpe:2.3:a:lizardbyte:sunshine:0.18.3
Lizardbyte » Sunshine » Version: 0.18.4

cpe:2.3:a:lizardbyte:sunshine:0.18.4
Lizardbyte » Sunshine » Version: 0.19.0

cpe:2.3:a:lizardbyte:sunshine:0.19.0
Lizardbyte » Sunshine » Version: 0.19.1

cpe:2.3:a:lizardbyte:sunshine:0.19.1
Lizardbyte » Sunshine » Version: 0.2.0

cpe:2.3:a:lizardbyte:sunshine:0.2.0
Lizardbyte » Sunshine » Version: 0.20.0

cpe:2.3:a:lizardbyte:sunshine:0.20.0
Lizardbyte » Sunshine » Version: 0.21.0

cpe:2.3:a:lizardbyte:sunshine:0.21.0
Lizardbyte » Sunshine » Version: 0.22.0

cpe:2.3:a:lizardbyte:sunshine:0.22.0
Lizardbyte » Sunshine » Version: 0.22.1

cpe:2.3:a:lizardbyte:sunshine:0.22.1
Lizardbyte » Sunshine » Version: 0.22.2

cpe:2.3:a:lizardbyte:sunshine:0.22.2
Lizardbyte » Sunshine » Version: 0.23.0

cpe:2.3:a:lizardbyte:sunshine:0.23.0
Lizardbyte » Sunshine » Version: 0.23.1

cpe:2.3:a:lizardbyte:sunshine:0.23.1
Lizardbyte » Sunshine » Version: 0.3.0

cpe:2.3:a:lizardbyte:sunshine:0.3.0
Lizardbyte » Sunshine » Version: 0.3.1

cpe:2.3:a:lizardbyte:sunshine:0.3.1
Lizardbyte » Sunshine » Version: 0.4.0

cpe:2.3:a:lizardbyte:sunshine:0.4.0
Lizardbyte » Sunshine » Version: 0.6.0

cpe:2.3:a:lizardbyte:sunshine:0.6.0
Lizardbyte » Sunshine » Version: 0.7.0

cpe:2.3:a:lizardbyte:sunshine:0.7.0
Lizardbyte » Sunshine » Version: 0.7.1

cpe:2.3:a:lizardbyte:sunshine:0.7.1
Lizardbyte » Sunshine » Version: 0.7.7

cpe:2.3:a:lizardbyte:sunshine:0.7.7
Lizardbyte » Sunshine » Version: 0.8.0

cpe:2.3:a:lizardbyte:sunshine:0.8.0
Lizardbyte » Sunshine » Version: 0.9.0

cpe:2.3:a:lizardbyte:sunshine:0.9.0
Lizardbyte » Sunshine » Version: 2025.118.151840

cpe:2.3:a:lizardbyte:sunshine:2025.118.151840
Lizardbyte » Sunshine » Version: 2025.122.141614

cpe:2.3:a:lizardbyte:sunshine:2025.122.141614
Lizardbyte » Sunshine » Version: 2025.628.4510

cpe:2.3:a:lizardbyte:sunshine:2025.628.4510
Lizardbyte » Sunshine » Version: 2025.828.181854

cpe:2.3:a:lizardbyte:sunshine:2025.828.181854
Lizardbyte » Sunshine » Version: 2025.829.135256

cpe:2.3:a:lizardbyte:sunshine:2025.829.135256
Lizardbyte » Sunshine » Version: 2025.923.184424

cpe:2.3:a:lizardbyte:sunshine:2025.923.184424
Lizardbyte » Sunshine » Version: 2025.923.33222

cpe:2.3:a:lizardbyte:sunshine:2025.923.33222
Lizardbyte » Sunshine » Version: 2025.924.154138

cpe:2.3:a:lizardbyte:sunshine:2025.924.154138

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-32253

Products

Pricing

Contact Us