VULNERABILITY INTELLIGENCE
CVE-2026-42012
CVSS score7.1 HIGH
EPSS probability0.49%
CISA KEVNot currently listed
Published2026-05-26
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
Description
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.
Weakness classification
- CWE-295: Improper Certificate Validation