CVE-2026-88648

ADVISORY - nist

Summary

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.

EPSS Score⁠: 0.00203 (0.102)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-295⁠

Improper Certificate Validation

ADVISORY - redhat

CWE-295⁠

Improper Certificate Validation

Impacted images

Advisories

NIST

CREATED

22 days ago

UPDATED

1 day ago

ADVISORY IDCVE-2026-88648⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-295⁠

CVSS SCORE

3.7low

Debian

CREATED

21 days ago

UPDATED

18 days ago

ADVISORY IDCVE-2026-88648⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

15 days ago

UPDATED

8 days ago

ADVISORY IDCVE-2026-88648⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

23 days ago

UPDATED

22 days ago

ADVISORY IDCVE-2026-88648⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-295⁠

CVSS SCORE

7.4high