A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
References
Configurations
Configuration 1 (hide)
|
History
26 Oct 2026, 22:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
14 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Oct 2026, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Sep 2026, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Sep 2026, 02:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Sep 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2026:65839 - |
17 Sep 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2026-05-07 12:16
Updated : 2026-10-30 17:17
NVD link : CVE-2026-42010
Mitre link : CVE-2026-42010
CVE.ORG link : CVE-2026-42010
JSON object : View
Products Affected
redhat
- hardened_images
- openshift_container_platform
- enterprise_linux
gnu
- gnutls
