Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-42010

Опубликовано: 15 мая 2026
Источник: msrc
CVSS3: 7.1
EPSS Низкий

Описание

Gnutls: gnutls: authentication bypass via nul character in username

EPSS

Процентиль: 61%
0.0105
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
3 месяца назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

CVSS3: 7.1
redhat
3 месяца назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

CVSS3: 7.1
nvd
3 месяца назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

CVSS3: 7.1
debian
3 месяца назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest\u2 ...

CVSS3: 9.8
redos
около 1 месяца назад

Уязвимость gnutls

EPSS

Процентиль: 61%
0.0105
Низкий

7.1 High

CVSS3