{"id":"CVE-2026-95184","published":"2026-10-08T18:18:33.240","lastModified":"2026-10-08T21:33:42.423","description":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":[],"products":[],"references":[{"url":"http://gnutls.com","tags":[]},{"url":"https://evil.com","tags":[]},{"url":"https://gist.github.com/lkloliver/0c8b47fa75a0958fa88587665b82ae15","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/lkloliver/0c8b47fa75a0958fa88587665b82ae15","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is an improper certificate validation issue in GnuTLS v3.8.13 that causes legitimate certificates to be rejected, leading to denial of service for valid users. This affects applications using GnuTLS for secure communications.","exploitability":"Exploitation is moderately difficult as it requires crafting a specific certificate that triggers the validation flaw, but once triggered, the DoS effect is immediate and affects all legitimate users attempting to connect.","blast_radius":"The impact could be significant across any application using GnuTLS v3.8.13 for TLS connections, potentially affecting web servers, email services, and other secure communication platforms that rely on proper certificate validation.","remediation":"Upgrade to GnuTLS version 3.8.14 or later to address the certificate validation flaw.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["tls","dos","certificate"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:25:19.481Z"}}