CVE-2026-95210: Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.

Overview

Severity
Low (CVSS 3.7)
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploit Status
Not Exploited
Patch Tuesday
2026-Oct
Released
2026-10-11
Last Updated
2026-10-12
EPSS Score
0.23% (percentile: 12.5%)

Affected Products (1)

Other

  • 0-17084

Revision History

  • 2026-10-11: Information published.
  • 2026-10-12: Information published.