{"id":"CVE-2026-42011","title":"A flaw was found in gnutls","summary":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to byp…","severity":"high","cvss":7.4,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-295"],"vendor":"Red Hat","product":"gnutls","affected":["gnutls all versions","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","libtasn1 (all versions)","gnutls (all versions)","libtasn1 (all versions)","gnutls (all versions)","libtasn1 (all versions)","gnutls (all versions)","libtasn1 (all versions)","gnutls (all versions)","libtasn1 (all versions)","gnutls (all versions)","libtasn1 (all versions)","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","gnutls (all versions)","rhcos (all versions)","rhcos (all versions)","rhcos (all versions)","rhcos (all versions)","rhcos (all versions)","cert-manager/cert-manager-trust-manager-rhel9 (all versions)","discovery/discovery-server-rhel9 (all versions)","discovery/discovery-ui-rhel9 (all versions)","gnutls-main (all versions)","rhai/base-image-neuron-rhel9 (all versions)","rhui5/cds-rhel9 (all versions)","rhui5/haproxy-rhel9 (all versions)","rhui5/installer-rhel9 (all versions)","rhui5/rhua-rhel9 (all versions)","rhui5/cds-kubernetes-tp-rhel9 (all versions)","rhui5/installer-tp-rhel9 (all versions)","rhui5/rhua-tp-rhel9 (all versions)","gnutls","openshift4/ose-hypershift-rhel9","openshift/ose-rhel-coreos-8 (all versions)"],"patched":["enterprise_linux_server_v_7_els","openshift_container_platform 4.12","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","openshift_container_platform 4.19","enterprise_linux_appstream_eus_v_10_0","enterprise_linux_appstream_v_10","enterprise_linux_appstream_v_8","enterprise_linux_appstream_aus_v_8_4","enterprise_linux_appstream_eus_extension_v_8_4","enterprise_linux_appstream_aus_v_8_6","enterprise_linux_appstream_eus_extension_v_8_6","enterprise_linux_appstream_e4s_v_8_8","enterprise_linux_appstream_tus_v_8_8","enterprise_linux_appstream_e4s_v_9_2","enterprise_linux_appstream_e4s_v_9_4","enterprise_linux_appstream_eus_v_9_6","enterprise_linux_appstream_v_9","enterprise_linux_baseos_eus_v_10_0","enterprise_linux_baseos_v_10","enterprise_linux_baseos_v_8","enterprise_linux_baseos_aus_v_8_4","enterprise_linux_baseos_eus_extension_v_8_4","enterprise_linux_baseos_aus_v_8_6","enterprise_linux_baseos_eus_extension_v_8_6","enterprise_linux_baseos_e4s_v_8_8","enterprise_linux_baseos_tus_v_8_8","enterprise_linux_baseos_e4s_v_9_2","enterprise_linux_baseos_e4s_v_9_4","enterprise_linux_baseos_eus_v_9_6","enterprise_linux_baseos_v_9","cert_manager_support_for_red_hat_openshift_release 1.20","discovery 2","hardened_images","update_infrastructure 5"],"published":"2026-05-07","updated":"2026-10-14","sourceUpdated":"2026-10-14T20:17:41.300","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:13274","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20611","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20612","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20613","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:26409","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:30004","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:30849","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:30850","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:32962","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:33125","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:40762","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:41921","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:43575","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:56853","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:57483","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:59831","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:60019","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:74674","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-42011","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467437","label":"secalert@redhat.com"},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6","label":"secalert@redhat.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42011.json"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42011"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00475,"epssPercentile":0.40872,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-05-07T00:00:00+00:00"},"ingestedAt":"2026-06-26T16:43:13.639Z","slug":"CVE-2026-42011","body":"## Overview\n\nA flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2026:43575** · Red Hat · fixed in: Red Hat Enterprise Linux Server (v. 7 ELS) · released 2026-07-22 · [advisory](https://access.redhat.com/errata/RHSA-2026:43575)\n- **RHSA-2026:59831** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:59831)\n- **RHSA-2026:56853** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.16 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56853)\n- **RHSA-2026:60019** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.17 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:60019)\n- **RHSA-2026:57483** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.18 · released 2026-08-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:57483)\n- **RHSA-2026:40762** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.19 · released 2026-07-22 · [advisory](https://access.redhat.com/errata/RHSA-2026:40762)\n- **RHSA-2026:26409** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0) · released 2026-06-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:26409)\n- **RHSA-2026:20613** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10) · released 2026-05-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:20613)\n- **RHSA-2026:20611** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux BaseOS (v. 8) · released 2026-05-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:20611)\n- **RHSA-2026:33125** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · released 2026-06-29 · [advisory](https://access.redhat.com/errata/RHSA-2026:33125)\n- **RHSA-2026:30849** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · released 2026-06-29 · [advisory](https://access.redhat.com/errata/RHSA-2026:30849)\n- **Red Hat VEX** · Moderate · affected: Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat OpenShift Container Platform 4 · updated 2026-10-06 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42011.json)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":40.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}