Orta CVSS 6.6

CVE-2026-42014: CVE-2026-42014: güvenlik açığı

Yayın: 16 Haziran 2026 05:16 · Güncelleme: 6 Kasım 2026 10:18

Açıklama (NVD)

A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.

Özet bilgiler

CVSS v3.1: 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
EPSS: %0,15 (yüzdelik 4)
CWE: CWE-825
Yama: Yok / bilinmiyor

Kaynaklar

Uygulamada aç Tüm CVE kayıtları