CVE-2026-88647

EUVD-2026-95113
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642
https://gitlab.com/gnutls/gnutls/-/issues/1802