Is CVE-2026-10028 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10028 being exploited in the wild.

How severe is CVE-2026-10028?

Medium severity, with a CVSS score of 4.3, published 28 May 2026.

Which products and versions are affected?

Gnome Glib-Networking 2.80.0-3.el10.

Is there a fix for CVE-2026-10028?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10028 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-10028?

Check whether you run Gnome Glib-Networking at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10028: GNOME glib-networking infinite loop in GnuTLS certificate verification

CVE-2026-10028 · Severity: medium · CVSS 4.3 · Published 2026-05-28

glib-networking is a software component used by many Linux applications to handle secure network connections. A flaw in how it verifies security certificates allows a remote attacker to send a specially crafted certificate that triggers an infinite loop. This causes the affected application to consume 100% of the processor's power, effectively freezing the service and making it unavailable to legitimate users.

Technologies: Gnome Glib-Networking. Vendors: Gnome.

Quick answers

Is CVE-2026-10028 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10028 being exploited in the wild.
How severe is CVE-2026-10028?: Medium severity, with a CVSS score of 4.3, published 28 May 2026.
Which products and versions are affected?: Gnome Glib-Networking 2.80.0-3.el10.
Is there a fix for CVE-2026-10028?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10028 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-10028?: Check whether you run Gnome Glib-Networking at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in the glib-networking GnuTLS backend within the certificate verification path. When processing a peer-supplied certificate chain, the code in `gtlsdatabase-gnutls.c` fails to detect circular issuer relationships. An attacker can present a crafted chain where certificates mutually reference each other as issuers, causing the `convert_certificate_chain_to_gnutls` function to enter an infinite loop during traversal. This results in a permanent hang of the handshake thread and 100% CPU utilization. The issue affects versions utilizing the GnuTLS backend when certificate verification is performed (e.g., a client connecting to a malicious server or a server verifying client certificates).

Affected products

GNOME glib-networking 2.80.0-3.el10

Timeline

2026-05-04: other: Reported to Red Hat by Aisle Research
2026-05-28: advisory: CVE-2026-10028 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.