An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 08 Oct 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Certificate Validation Failure Allows Sensitive Information Disclosure in gnutls 3.8.13 | |
| Weaknesses | CWE-332 CWE-749 |
Thu, 08 Oct 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU) | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-10-08T18:51:16.356Z
Reserved: 2026-07-30T00:00:00.000Z
Link: CVE-2026-67693
No data.
Status : Awaiting Analysis
Published: 2026-10-08T19:18:41.280
Modified: 2026-10-08T21:33:42.423
Link: CVE-2026-67693
No data.
OpenCVE Enrichment
Updated: 2026-10-08T21:00:14Z