CVE detail
CVE-2026-3833
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 29.4 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
18 source links · newest first
- CVE-2026-3833 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonMicrosoft MSRC
Information published.
vendormsrc.microsoft.comMay 7, 2026, 8:10 AM - https://access.redhat.com/errata/RHSA-2026:43575access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:41921access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM No excerpt available.
Exploitgitlab.comApr 30, 2026, 6:16 PM- https://bugzilla.redhat.com/show_bug.cgi?id=2445763bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/security/cve/CVE-2026-3833access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:33125access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:32962access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:30850access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:30849access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:30004access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:29197access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:26409access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:26319access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:20613access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:20612access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:20611access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM - https://access.redhat.com/errata/RHSA-2026:13274access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 30, 2026, 6:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- gnutls/gnutlsHigh confidencegitlabNVD Exploit reference0 starsDiscovered Jul 12, 2026, 6:20 PM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-42009CVSS 7.5 · High
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible…
- CVE-2026-42010CVSS 7.1 · High
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernam…
- CVE-2026-3832CVSS 3.7 · Low
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS ha…
- CVE-2026-13757CVSS 6.2 · Medium
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive…
- CVE-2026-13595CVSS 6.8 · Medium
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a paren…
- CVE-2026-55653CVSS 4.3 · Medium
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Fed…