Description
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2026-42010 ↗
- access.redhat.com/errata/RHSA-2026:13274 ↗
- access.redhat.com/errata/RHSA-2026:20611 ↗
- access.redhat.com/errata/RHSA-2026:20612 ↗
- access.redhat.com/errata/RHSA-2026:20613 ↗
- access.redhat.com/errata/RHSA-2026:26319 ↗
- access.redhat.com/errata/RHSA-2026:26409 ↗
- access.redhat.com/errata/RHSA-2026:29197 ↗
- access.redhat.com/errata/RHSA-2026:30004 ↗
- access.redhat.com/errata/RHSA-2026:30849 ↗
- access.redhat.com/errata/RHSA-2026:30850 ↗
- access.redhat.com/errata/RHSA-2026:32962 ↗
- access.redhat.com/errata/RHSA-2026:33125 ↗
- access.redhat.com/errata/RHSA-2026:34764 ↗
- access.redhat.com/errata/RHSA-2026:34788 ↗
- access.redhat.com/errata/RHSA-2026:34790 ↗
- access.redhat.com/errata/RHSA-2026:36004 ↗
- access.redhat.com/errata/RHSA-2026:36005 ↗
- access.redhat.com/errata/RHSA-2026:36006 ↗
- access.redhat.com/errata/RHSA-2026:40762 ↗
- access.redhat.com/errata/RHSA-2026:41921 ↗
- access.redhat.com/errata/RHSA-2026:56853 ↗
- access.redhat.com/errata/RHSA-2026:57483 ↗
- access.redhat.com/errata/RHSA-2026:58981 ↗
- access.redhat.com/errata/RHSA-2026:59831 ↗
- access.redhat.com/errata/RHSA-2026:60019 ↗
- access.redhat.com/errata/RHSA-2026:62409 ↗
- access.redhat.com/errata/RHSA-2026:65839 ↗
- access.redhat.com/errata/RHSA-2026:67857 ↗
- access.redhat.com/errata/RHSA-2026:72502 ↗
- access.redhat.com/errata/RHSA-2026:74674 ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.