{"schema_version":1,"title":"GnuTLS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in GnuTLS: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95209, was published on 8 October 2026. Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/gnutls","json_url":"https://junglewise.ai/threats/vendors/gnutls.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/gnutls","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":8,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":14},"latest":[{"cve":"CVE-2026-95209","cvss":7.5,"epss":0.0028,"slug":"cve-2026-95209-an-issue-in-gnutls-v3-8-13-causes-legitimate-ca-certificates-to","title":"GnuTLS certificate validation denial of service","severity":"high","exploited":false,"published_at":"2026-10-08T19:20:52.83+00:00","url":"https://junglewise.ai/threats/cve-2026-95209-an-issue-in-gnutls-v3-8-13-causes-legitimate-ca-certificates-to"},{"cve":"CVE-2026-67693","cvss":7.5,"epss":0.0019,"slug":"cve-2026-67693-an-issue-in-gnutls-v-3-8-13-allows-an-attacker-to-obtain","title":"GnuTLS improper X.509 certificate validation","severity":"high","exploited":false,"published_at":"2026-10-08T19:18:41.28+00:00","url":"https://junglewise.ai/threats/cve-2026-67693-an-issue-in-gnutls-v-3-8-13-allows-an-attacker-to-obtain"},{"cve":"CVE-2026-95210","cvss":4.8,"epss":0.0023,"slug":"cve-2026-95210-improper-certificate-validation-in-gnutls-v3-8-13-causes-the","title":"GnuTLS improper certificate validation in extension processing","severity":"medium","exploited":false,"published_at":"2026-10-08T18:18:33.37+00:00","url":"https://junglewise.ai/threats/cve-2026-95210-improper-certificate-validation-in-gnutls-v3-8-13-causes-the"},{"cve":"CVE-2026-42014","cvss":6.6,"slug":"cve-2026-42014-gnutls-use-after-free-in-gnutls-pkcs11-token-set-pin","title":"GnuTLS use-after-free in gnutls_pkcs11_token_set_pin","severity":"medium","exploited":false,"published_at":"2026-06-16T02:16:19.14+00:00","url":"https://junglewise.ai/threats/cve-2026-42014-gnutls-use-after-free-in-gnutls-pkcs11-token-set-pin"},{"cve":"CVE-2026-5419","cvss":3.7,"slug":"cve-2026-5419-gnutls-non-constant-time-pkcs-7-padding-check","title":"GnuTLS non-constant-time PKCS#7 padding check","severity":"low","exploited":false,"published_at":"2026-06-01T21:16:47.48+00:00","url":"https://junglewise.ai/threats/cve-2026-5419-gnutls-non-constant-time-pkcs-7-padding-check"},{"cve":"CVE-2026-42015","cvss":5.3,"slug":"cve-2026-42015-gnutls-off-by-one-error-in-pkcs-12-bag-element-bounds-check","title":"GnuTLS off-by-one error in PKCS#12 bag element bounds check","severity":"medium","exploited":false,"published_at":"2026-05-26T22:16:42.18+00:00","url":"https://junglewise.ai/threats/cve-2026-42015-gnutls-off-by-one-error-in-pkcs-12-bag-element-bounds-check"},{"cve":"CVE-2026-42013","cvss":8.2,"slug":"cve-2026-42013-gnutls-certificate-validation-bypass-via-oversized-san-field","title":"GnuTLS certificate validation bypass via oversized SAN field","severity":"high","exploited":false,"published_at":"2026-05-26T22:16:42.05+00:00","url":"https://junglewise.ai/threats/cve-2026-42013-gnutls-certificate-validation-bypass-via-oversized-san-field"},{"cve":"CVE-2026-42012","cvss":7.1,"slug":"cve-2026-42012-gnutls-certificate-validation-bypass-in-uri-and-srv-san-handling","title":"GnuTLS certificate validation bypass in URI and SRV SAN handling","severity":"high","exploited":false,"published_at":"2026-05-26T22:16:41.913+00:00","url":"https://junglewise.ai/threats/cve-2026-42012-gnutls-certificate-validation-bypass-in-uri-and-srv-san-handling"},{"cve":"CVE-2026-42009","cvss":7.5,"slug":"cve-2026-42009-gnutls-denial-of-service-in-dtls-packet-reordering","title":"GnuTLS denial of service in DTLS packet reordering","severity":"high","exploited":false,"published_at":"2026-05-18T13:16:32.707+00:00","url":"https://junglewise.ai/threats/cve-2026-42009-gnutls-denial-of-service-in-dtls-packet-reordering"},{"cve":"CVE-2026-42011","cvss":7.4,"epss":0.0001,"slug":"cve-2026-42011-gnutls-name-constraint-bypass-in-certificate-validation","title":"GnuTLS name constraint bypass in certificate validation","severity":"high","exploited":false,"published_at":"2026-05-07T15:16:09.76+00:00","url":"https://junglewise.ai/threats/cve-2026-42011-gnutls-name-constraint-bypass-in-certificate-validation"},{"cve":"CVE-2026-33846","cvss":7.5,"epss":0.0003,"slug":"cve-2026-33846-gnutls-heap-buffer-overflow-in-dtls-handshake-reassembly","title":"GnuTLS heap buffer overflow in DTLS handshake reassembly","severity":"high","exploited":false,"published_at":"2026-05-04T10:15:59.69+00:00","url":"https://junglewise.ai/threats/cve-2026-33846-gnutls-heap-buffer-overflow-in-dtls-handshake-reassembly"},{"cve":"CVE-2026-1584","cvss":7.5,"epss":0.0133,"slug":"cve-2026-1584-gnutls-null-pointer-dereference-in-psk-binder-verification","title":"GnuTLS NULL pointer dereference in PSK binder verification","severity":"high","exploited":false,"published_at":"2026-04-09T18:16:44.047+00:00","url":"https://junglewise.ai/threats/cve-2026-1584-gnutls-null-pointer-dereference-in-psk-binder-verification"},{"cve":"CVE-2025-14831","cvss":5.3,"epss":0.0006,"slug":"cve-2025-14831-gnutls-denial-of-service-via-excessive-resource-consumption","title":"GnuTLS denial of service via excessive resource consumption during certificate verification","severity":"medium","exploited":false,"published_at":"2026-02-09T15:16:09.937+00:00","url":"https://junglewise.ai/threats/cve-2025-14831-gnutls-denial-of-service-via-excessive-resource-consumption"},{"cve":"CVE-2025-9820","cvss":4,"epss":0.002,"slug":"cve-2025-9820-gnutls-stack-overflow-in-gnutls-pkcs11-token-init","title":"GnuTLS stack overflow in gnutls_pkcs11_token_init","severity":"medium","exploited":false,"published_at":"2026-01-26T20:16:09.37+00:00","url":"https://junglewise.ai/threats/cve-2025-9820-gnutls-stack-overflow-in-gnutls-pkcs11-token-init"},{"cve":"CVE-2025-6395","cvss":6.5,"epss":0.0062,"slug":"cve-2025-6395-gnutls-null-pointer-dereference-in-gnutls-figure-common","title":"GnuTLS NULL pointer dereference in _gnutls_figure_common_ciphersuite","severity":"medium","exploited":false,"published_at":"2025-07-10T16:15:25.11+00:00","url":"https://junglewise.ai/threats/cve-2025-6395-gnutls-null-pointer-dereference-in-gnutls-figure-common"},{"cve":"CVE-2024-12243","cvss":5.3,"slug":"cve-2024-12243-gnutls-denial-of-service-via-inefficient-der-decoding-in-libtasn1","title":"GnuTLS denial of service via inefficient DER decoding in libtasn1","severity":"medium","exploited":false,"published_at":"2025-02-10T16:15:37.423+00:00","url":"https://junglewise.ai/threats/cve-2024-12243-gnutls-denial-of-service-via-inefficient-der-decoding-in-libtasn1"}],"vendor":{"hub":true,"name":"GnuTLS","slug":"gnutls","description":"Open-source implementation of the TLS and SSL protocols for secure communication.","url":"https://junglewise.ai/threats/vendors/gnutls"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-42013","cvss":8.2,"slug":"cve-2026-42013-gnutls-certificate-validation-bypass-via-oversized-san-field","title":"GnuTLS certificate validation bypass via oversized SAN field","severity":"high","exploited":false,"published_at":"2026-05-26T22:16:42.05+00:00","url":"https://junglewise.ai/threats/cve-2026-42013-gnutls-certificate-validation-bypass-via-oversized-san-field"},{"cve":"CVE-2026-1584","cvss":7.5,"epss":0.0133,"slug":"cve-2026-1584-gnutls-null-pointer-dereference-in-psk-binder-verification","title":"GnuTLS NULL pointer dereference in PSK binder verification","severity":"high","exploited":false,"published_at":"2026-04-09T18:16:44.047+00:00","url":"https://junglewise.ai/threats/cve-2026-1584-gnutls-null-pointer-dereference-in-psk-binder-verification"},{"cve":"CVE-2026-95209","cvss":7.5,"epss":0.0028,"slug":"cve-2026-95209-an-issue-in-gnutls-v3-8-13-causes-legitimate-ca-certificates-to","title":"GnuTLS certificate validation denial of service","severity":"high","exploited":false,"published_at":"2026-10-08T19:20:52.83+00:00","url":"https://junglewise.ai/threats/cve-2026-95209-an-issue-in-gnutls-v3-8-13-causes-legitimate-ca-certificates-to"},{"cve":"CVE-2026-67693","cvss":7.5,"epss":0.0019,"slug":"cve-2026-67693-an-issue-in-gnutls-v-3-8-13-allows-an-attacker-to-obtain","title":"GnuTLS improper X.509 certificate validation","severity":"high","exploited":false,"published_at":"2026-10-08T19:18:41.28+00:00","url":"https://junglewise.ai/threats/cve-2026-67693-an-issue-in-gnutls-v-3-8-13-allows-an-attacker-to-obtain"},{"cve":"CVE-2026-33846","cvss":7.5,"epss":0.0003,"slug":"cve-2026-33846-gnutls-heap-buffer-overflow-in-dtls-handshake-reassembly","title":"GnuTLS heap buffer overflow in DTLS handshake reassembly","severity":"high","exploited":false,"published_at":"2026-05-04T10:15:59.69+00:00","url":"https://junglewise.ai/threats/cve-2026-33846-gnutls-heap-buffer-overflow-in-dtls-handshake-reassembly"},{"cve":"CVE-2026-42009","cvss":7.5,"slug":"cve-2026-42009-gnutls-denial-of-service-in-dtls-packet-reordering","title":"GnuTLS denial of service in DTLS packet reordering","severity":"high","exploited":false,"published_at":"2026-05-18T13:16:32.707+00:00","url":"https://junglewise.ai/threats/cve-2026-42009-gnutls-denial-of-service-in-dtls-packet-reordering"},{"cve":"CVE-2026-42011","cvss":7.4,"epss":0.0001,"slug":"cve-2026-42011-gnutls-name-constraint-bypass-in-certificate-validation","title":"GnuTLS name constraint bypass in certificate validation","severity":"high","exploited":false,"published_at":"2026-05-07T15:16:09.76+00:00","url":"https://junglewise.ai/threats/cve-2026-42011-gnutls-name-constraint-bypass-in-certificate-validation"},{"cve":"CVE-2026-42012","cvss":7.1,"slug":"cve-2026-42012-gnutls-certificate-validation-bypass-in-uri-and-srv-san-handling","title":"GnuTLS certificate validation bypass in URI and SRV SAN handling","severity":"high","exploited":false,"published_at":"2026-05-26T22:16:41.913+00:00","url":"https://junglewise.ai/threats/cve-2026-42012-gnutls-certificate-validation-bypass-in-uri-and-srv-san-handling"},{"cve":"CVE-2026-42014","cvss":6.6,"slug":"cve-2026-42014-gnutls-use-after-free-in-gnutls-pkcs11-token-set-pin","title":"GnuTLS use-after-free in gnutls_pkcs11_token_set_pin","severity":"medium","exploited":false,"published_at":"2026-06-16T02:16:19.14+00:00","url":"https://junglewise.ai/threats/cve-2026-42014-gnutls-use-after-free-in-gnutls-pkcs11-token-set-pin"},{"cve":"CVE-2025-6395","cvss":6.5,"epss":0.0062,"slug":"cve-2025-6395-gnutls-null-pointer-dereference-in-gnutls-figure-common","title":"GnuTLS NULL pointer dereference in _gnutls_figure_common_ciphersuite","severity":"medium","exploited":false,"published_at":"2025-07-10T16:15:25.11+00:00","url":"https://junglewise.ai/threats/cve-2025-6395-gnutls-null-pointer-dereference-in-gnutls-figure-common"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"GnuTLS","slug":"gnutls-gnutls","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/gnutls-gnutls"}]}