CERT24CVE-2026-42013 — GnuTLS: certificate validation bypass due to oversized Subject Alternative NameLoading data…

CVE-2026-42013 — GnuTLS: certificate validation bypass due to oversized Subject Alternative Name

When GnuTLS validates certificates, an oversized Subject Alternative Name (SAN) may cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation and potentially conduct spoofing or man-in-the-middle attacks.

← Back to intelligence

CVE-2026-42013 — GnuTLS: certificate validation bypass due to oversized Subject Alternative Name

When GnuTLS validates certificates, an oversized Subject Alternative Name (SAN) may cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation and potentially conduct spoofing or man-in-the-middle attacks.