CVE-2026-42011

CVE-2026-42011 · Gnutls: gnutls: security bypass due to incorrect name constraint handling

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

CVSS 7.4 · Alta · EPSS 0,5% · Corrección disponible

Publicación

2026-05-07T13:51:04.695Z

Actualización

2026-10-14T19:25:25.848Z

Pila tecnológica: system

Comprueba tu servidor →