CVE-2026-88647
ADVISORY - nistSummary
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
EPSS Score: 0.00212 (0.106)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Improper Validation of Certificate with Host Mismatch
ADVISORY - redhat
Improper Certificate Validation
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-88647
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
9.1criticalDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-88647
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-88647
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-88647
EXPLOITABILITY SCORE
2.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)