CVE-2026-95209: High severity GNUTLS GNUTLS vulnerability
Published Oct 8, 2026
·Updated
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).
Other sources
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
— NVD
Affected Software
15 affected components
GNUTLS GNUTLS=3.8.13
debian/gnutls28*
debian/gnutls28*
debian/gnutls28*
ubuntu/gnutls26*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
ubuntu/gnutls28*
Event History
Oct 8, 2026
CVE Published
via MITRE·12:00 AM
Rejected
via MITRE·12:00 AM
Data Sourced
via OSV·07:20 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·07:20 PM
Description
Oct 11, 2026
Data Sourced
via Microsoft·08:52 AM
DescriptionSeverityWeakness
Nov 4, 2026
Rejected
via MITRE·04:11 AM
Rejected
via NVD·05:19 AM
Frequently Asked Questions
1
What is the operational impact of this issue?
GnuTLS 3.8.13 may reject legitimate CA certificates. This can cause denial of service for certificate validation operations that rely on affected CA certificates.
2
Which version is identified as affected?
The reported affected version is GnuTLS 3.8.13.