CVE-2026-5260

ADVISORY - nist

Summary

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.

EPSS Score⁠: 0.00727 (0.514)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-126⁠

Buffer Over-read

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.