Vulnerability

[ Description ]Official description

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund8 Oct 2026WID-SEC-2026-3843

  GnuTLS: Multiple vulnerabilities Translated from German

  CVE-2026-95210CVE-2026-95209CVE-2026-95184+3 more CVEs

[ References ]References

• gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642
• gitlab.com/gnutls/gnutls/-/issues/1802