Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-42010

Опубликовано: 15 мая 2026
Источник: msrc
CVSS3: 7.1
EPSS Низкий

Описание

Gnutls: gnutls: authentication bypass via nul character in username

EPSS

Процентиль: 64%
0.0105
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
6 месяцев назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

CVSS3: 7.1
redhat
6 месяцев назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

CVSS3: 9.8
nvd
6 месяцев назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

CVSS3: 9.8
debian
6 месяцев назад

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest\u2 ...

CVSS3: 9.8
redos
5 месяцев назад

Уязвимость gnutls

EPSS

Процентиль: 64%
0.0105
Низкий

7.1 High

CVSS3