CVE-2026-88648
Published: October 9, 2026Last modified: October 20, 2026
Description
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | gnutls | Not affected (3.7.8-r2) |
| 25 LTS | gnutls | Not affected (3.8.8-r0) | |
| Stream | gnutls | Not affected (3.8.0-r3) |