CVE-2026-1584 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 28%

Affected Products (NVD)

Vendor	Product	Version
gnu	gnutls	-
redhat	hardened_images	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

gnutls28

bookworm	3.7.9-2+deb12u6 fixed
bookworm (security)	3.7.9-2+deb12u7 fixed
bullseye	3.7.1-5+deb11u5 fixed
bullseye (security)	3.7.1-5+deb11u10 fixed
forky	3.8.13-1 fixed
sid	3.8.13-1 fixed
trixie	3.8.9-3+deb13u3 fixed
trixie (security)	3.8.9-3+deb13u4 fixed

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Vulnerability Media Exposure

[ENGLISH] ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model page pushed a stealer. Then came the familiar ransom claim: the data was returned and deleted. The pattern is clear. One weak dependency can leak keys. One leaked key can open cloud access. One cloud foothold can become a production
Published: 2026-05-18T19:20:17+05:30

References

https://access.redhat.com/errata/RHSA-2026:7477

https://access.redhat.com/security/cve/CVE-2026-1584

https://bugzilla.redhat.com/show_bug.cgi?id=2435258