Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-42011

Опубликовано: 19 мая 2026
Источник: msrc
CVSS3: 7.4
EPSS Низкий

Описание

Gnutls: gnutls: security bypass due to incorrect name constraint handling

EPSS

Процентиль: 38%
0.00475
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
ubuntu
3 месяца назад

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

CVSS3: 7.4
redhat
3 месяца назад

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

CVSS3: 7.4
nvd
3 месяца назад

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

CVSS3: 7.4
debian
3 месяца назад

A flaw was found in gnutls. This vulnerability occurs because permitte ...

CVSS3: 7.4
redos
около 1 месяца назад

Уязвимость gnutls

EPSS

Процентиль: 38%
0.00475
Низкий

7.4 High

CVSS3