CRITICAL 9.1 NVD
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
References
- https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642
- https://gitlab.com/gnutls/gnutls/-/issues/1802
- https://gitlab.com/gnutls/gnutls/-/issues/1802
This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-10-08 via NVD.
Risk Timeline
CVE Disclosed2026-10-08 · 3 days ago
Remediation Resources
Analysis & PoC
gitlab.com/gnutls/gnutls/-/issues/1802
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.