CVE-2026-95209

Summary

A flaw in gnutls v3.8.13 causes legitimate CA certificates to be incorrectly rejected, leading to denial of service when TLS connections fail. This affects systems that rely on certificate validation for secure communications.

Exploitability

Exploitation is relatively straightforward as it requires only sending a malformed certificate to trigger the DoS condition, with no authentication or user interaction required.

Blast radius

The impact could be significant across any system using gnutls v3.8.13 for TLS certificate validation, potentially affecting web servers, email services, and other applications that depend on secure connections.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to gnutls 3.8.14 or later to resolve the CA certificate rejection issue.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.