Lucene search
+L

155 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/26 12:00 a.m.•13 views

UBUNTU-CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/25 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-106017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/10/23 4:30 p.m.•15 views

SUSE CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/22 10:17 a.m.•9 views

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS0.002EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/22 10:17 a.m.•48 views

DEBIAN-CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/22 10:17 a.m.•10 views

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/22 9:18 a.m.•10 views

EUVD-2026-108107

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/22 9:18 a.m.•9 views

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 9:18 a.m.•25 views

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS0.002EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 9:18 a.m.•14 views

CVE-2026-106017

The OpenVPN 3 Core library (versions 3.4 through 3.11.7 ) is vulnerable to improper certificate validation (CWE-295). This flaw allows an attacker to circumvent extended key usage restrictions . The vulnerability carries a HIGH base severity score of 8.9. No specific exploit details or remediatio...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/22 9:18 a.m.•9 views

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•9 views

PT-2026-121317

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

8.9CVSS5.9AI score0.002EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/10/10 1:12 a.m.•8 views

SUSE CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

7.5CVSS5.8AI score0.00151EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/08 11:40 p.m.•18 views

CVE-2026-67693

A flaw was found in GnuTLS. The certificate verification process fails to properly reject end-entity digital certificates containing contradictory Key Usage KU and Extended Key Usage EKU extensions, which define the permitted cryptographic operations of a certificate. A remote attacker could...

5.9CVSS5.8AI score0.00151EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2026/10/08 7:18 p.m.•29 views

AZL-107448 CVE-2026-67693 affecting package gnutls 3.8.13-1

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

7.5CVSS5.8AI score0.00151EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/08 7:18 p.m.•29 views

DEBIAN-CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

3.7CVSS5.8AI score0.00151EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/08 7:18 p.m.•68 views

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

3.7CVSS0.00151EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/08 7:18 p.m.•12 views

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

3.7CVSS5.9AI score0.00151EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/08 7:18 p.m.•31 views

UBUNTU-CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

3.7CVSS5.8AI score0.00151EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/08 12:00 a.m.•32 views

EUVD-2026-95206

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

5.9AI score0.00151EPSS
SaveExploits0References3
Rows per page
Query Builder