High severity7.4NVD Advisory· Published May 7, 2026· Updated Jul 22, 2026
CVE-2026-42011
CVE-2026-42011
Description
A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- osv-coords7 versionspkg:rpm/almalinux/gnutlspkg:rpm/almalinux/gnutls-c%2B%2Bpkg:rpm/almalinux/gnutls-danepkg:rpm/almalinux/gnutls-develpkg:rpm/almalinux/gnutls-fipspkg:rpm/almalinux/gnutls-utilspkg:rpm/opensuse/gnutls&distro=openSUSE%20Tumbleweed
< 3.6.16-8.el8_10.6+ 6 more
- (no CPE)range: < 3.6.16-8.el8_10.6
- (no CPE)range: < 3.6.16-8.el8_10.6
- (no CPE)range: < 3.6.16-8.el8_10.6
- (no CPE)range: < 3.6.16-8.el8_10.6
- (no CPE)range: < 3.8.10-4.el10_2
- (no CPE)range: < 3.6.16-8.el8_10.6
- (no CPE)range: < 3.8.13-1.1
Patches
Vulnerability mechanics
References
18- access.redhat.com/errata/RHSA-2026:13274nvd
- access.redhat.com/errata/RHSA-2026:20611nvd
- access.redhat.com/errata/RHSA-2026:20612nvd
- access.redhat.com/errata/RHSA-2026:20613nvd
- access.redhat.com/errata/RHSA-2026:26319nvd
- access.redhat.com/errata/RHSA-2026:26409nvd
- access.redhat.com/errata/RHSA-2026:29197nvd
- access.redhat.com/errata/RHSA-2026:30004nvd
- access.redhat.com/errata/RHSA-2026:30849nvd
- access.redhat.com/errata/RHSA-2026:30850nvd
- access.redhat.com/errata/RHSA-2026:32962nvd
- access.redhat.com/errata/RHSA-2026:33125nvd
- access.redhat.com/errata/RHSA-2026:40762nvd
- access.redhat.com/errata/RHSA-2026:41921nvd
- access.redhat.com/errata/RHSA-2026:43575nvd
- access.redhat.com/security/cve/CVE-2026-42011nvd
- bugzilla.redhat.com/show_bug.cginvd
- www.gnutls.org/security-new.htmlnvd
News mentions
0No linked articles in our index yet.