CVE-2026-42011

Name of the Vulnerable Software and Affected Versions gnutls versions prior to 3.8.13-1.1

Description A flaw exists where permitted name constraints are incorrectly ignored when previous Certificate Authorities (CAs) only have excluded name constraints. A remote attacker can exploit this to bypass critical name constraint checks during certificate validation, which may lead to the acceptance of invalid certificates and enable spoofing or man-in-the-middle attacks.

Recommendations Update to version 3.8.13-1.1.