Vulnerability

[ Description ]Official description

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund8 Oct 2026WID-SEC-2026-3843

  GnuTLS: Multiple vulnerabilities Translated from German

  CVE-2026-95210CVE-2026-95209CVE-2026-95184+3 more CVEs

[ References ]References

• gnutls.com
• gist.github.com/lkloliver/6fbfc191bc6163942c8017551ac3f238
• gitlab.com/gnutls/gnutls/-/blob/3.8.13/lib/x509/verify.c
• gitlab.com/gnutls/gnutls/-/work_items/1642