CVE-2026-88647

Description

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.

References

https://gitlab.com/gnutls/gnutls/-/issues/1802

https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95113

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS