CVE-2026-3833
A flaw was found in gnutls.
Published Apr 30, 2026 · updated Oct 14, 2026 · gnu gnutls
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of labels, specifically for (DNS) or (email) constraints within or . A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
Timeline
Detection, updates, and resolution for this record.
Apr 30, 2026 · NIST NVD
Detected
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of labels, specifically for (DNS) or (email) constraints within or . A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of labels, specifically for (DNS) or (email) constraints within or . A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of labels, specifically for (DNS) or (email) constraints within or . A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This
Affected
- cpe gnu/gnutlsversion unspecified
- cpe redhat/enterprise linux10.0
- cpe redhat/enterprise linux6.0
- cpe redhat/enterprise linux7.0
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux9.0
- cpe redhat/hardened imagesversion unspecified
- cpe redhat/openshift container platform4.0
Sources
- CVE.orgCVE-2026-3833
Official CVE identifier
cve.org - NIST NVDCVE-2026-3833
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of labels, specifically for (DNS) or (email) constraints within or . A remote attacker can explo
nvd.nist.gov