CVE-2026-95210
Description
A flaw was found in GnuTLS. Improper certificate validation causes the library to accept certificates containing invalid extensions. A remote attacker could exploit this flaw by presenting a specially crafted certificate during a secure connection. Successful exploitation may allow an attacker to bypass certificate validation checks and undermine the integrity of secure communications.
Statement
This vulnerability is classified as Moderate impact because, while an attacker could present an improperly formatted credential during TLS negotiations, exploitation typically requires high complexity such as an active adversary in the network path, and it does not allow arbitrary code execution or denial of service. Within Red Hat environments, GnuTLS serves as a core cryptographic library for secure network transactions across various system utilities and daemons. Flawed handling of certificate attributes may cause client or server applications to tolerate invalid extensions instead of terminating the connection, potentially weakening authorization decisions that depend on those specific extension fields.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
