What’s Vulnerable › Vulnerabilities

CVE-2026-88647

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-08 · updated 2026-10-19
• Weakness: CWE-297

Description

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.

References

• https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642
• https://gitlab.com/gnutls/gnutls/-/issues/1802

Get alerted when CVE-2026-88647 or the next vulnerability affects your stack