CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para gnutls28 en los últimos 30 días: 6. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 6
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.