A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2026-05-07 12:16
Updated : 2026-09-15 12:17
NVD link : CVE-2026-42010
Mitre link : CVE-2026-42010
CVE.ORG link : CVE-2026-42010
JSON object : View
Products Affected
redhat
- enterprise_linux
- openshift_container_platform
- hardened_images
gnu
- gnutls
