CVE-2026-88648EPSS p1.6%

CVE-2026-88648CVE-2026-88648

Description

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.

Scoring

EPSS0.12% probability of exploitation · percentile 1.6% · 2026-10-09T12:00:22Z
Last modified2026-10-08
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.