EUVD-2026-95113

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

PT-2026-108162

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-88648

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

CVE-2026-95184

Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

CVE-2026-95210

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...

EUVD-2026-95139

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

CVE-2026-88648

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

PT-2026-108051

Name of the Vulnerable Software and Affected Versions GnuTLS version 3.8.13 Description A hostname verification bypass allows attackers to circumvent the Common Name fallback mechanism, which is a process used to verify the identity of a server when the Subject Alternative Name is missing. This...

PT-2026-108158

Name of the Vulnerable Software and Affected Versions gnutls version 3.8.13 Description An issue exists where the software fails to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU, which could allow an attacker to obtain...

CVE-2026-88647: Improper Validation of Certificate with Host Mismatch

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

CVE-2026-88647

A hostname verification bypass in GnuTLS v3.8.13 allows an attacker to circumvent the Common Name fallback mechanism using a crafted certificate. This flaw can lead to information disclosure by enabling an attacker to eavesdrop on or intercept encrypted network communications. Impacts have been i...

CVE-2026-95184

A flaw in gnutls v3.8.13 involving improper certificate validation causes the application to reject legitimate certificates from valid users. This issue results in a Denial of Service (DoS) condition. The vulnerability has been addressed in the gnutls28 package for Debian 13 and Debian 12 , with ...