Yüksek CVSS 7.1

CVE-2026-42012: CVE-2026-42012: güvenlik açığı

Yayın: 27 Mayıs 2026 01:16 · Güncelleme: 6 Kasım 2026 10:19

Açıklama (NVD)

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.

Özet bilgiler

CVSS v3.1: 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
EPSS: %0,37 (yüzdelik 32)
CWE: CWE-295
Yama: Yok / bilinmiyor

Kaynaklar

Uygulamada aç Tüm CVE kayıtları