CVE-2026-42011

Thursday, May 07, 2026

7.4

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

Affected Software

Vendor	Product	Version Range	Status
Red Hat	Red Hat Enterprise Linux 10	`0:3.8.10-4.el10_2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:3.8.9-9.el10_0.19 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:3.6.16-8.el8_10.6 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:3.6.16-8.el8_10.6 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:3.6.14-10.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:4.13-3.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:3.6.14-10.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:4.13-3.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:3.6.16-5.el8_6.5 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:4.13-3.el8_6.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	`0:3.6.16-5.el8_6.5 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	`0:4.13-3.el8_6.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:3.6.16-7.el8_8.4 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:4.13-4.el8_8.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:3.6.16-7.el8_8.4 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:4.13-4.el8_8.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.8.10-4.el9_8 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.8.10-4.el9_8 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	`0:3.8.3-4.el9_4.6 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:3.8.3-6.el9_6.4 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1782159791 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1782166952 < *`	unaffected
Red Hat	Red Hat Hardened Images	`3.8.13-1.hum1 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525684 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525671 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525693 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525739 < *`	unaffected

Weaknesses

CWE-295: Improper Certificate Validation

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: total

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.