NetSight
IP …
high7.1

CVE-2026-42010

A flaw was found in gnutls.

Impact

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

Affected products

VendorProductAffected versions
GnuGnutls
All versions
RedhatHardened Images
All versions
RedhatOpenshift Container Platform
Version 4.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0, 9.0, 10.0

Weakness classification

CWE-170CWE-626

References