Skip to content
Threat Feed

Tag

CVE-2026-42013

1 brief RSS
high threat

CVE-2026-42013: gnutls Certificate Validation Bypass via Oversized SAN

A vulnerability in gnutls (CVE-2026-42013) allows a remote attacker to bypass certificate validation by providing an oversized Subject Alternative Name (SAN), causing the validation process to fall back to the Common Name (CN) field, potentially leading to spoofing or man-in-the-middle attacks.

gnutls certificate validation spoofing man-in-the-middle CVE-2026-42013
2r 1t 1c