CVE-2026-88647

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name…

Risk score: 40/100
CVSS: 6.5 v3.1
Exploit chance (30 days): 0.2%
Published: 8 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.5 medium

References

https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642
https://gitlab.com/gnutls/gnutls/-/issues/1802

Original description

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.

Last activity 8 Oct 2026. Patch Forecast updates every hour.