Is there a patch available for CVE-2026-73251?

Yes, a patch is available for CVE-2026-73251. Update the affected software to the latest version immediately.

Ubuntu TLS Stack CVE-2026-73251

Q: What is the CVSS score of CVE-2026-73251?

CVE-2026-73251 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-63494 CRITICAL

Improper Certificate Validation (CWE-295)

2026-08-14 vendor:ubuntu

Information Disclosure

9.3

CVSS 4.0 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (vendor:ubuntu) · only source for this CVE.

CVSS VectorVendor: vendor:ubuntu

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Aug 20, 2026 - 18:03 EUVD

Analysis Generated

Aug 14, 2026 - 22:39 vuln.today

DescriptionCVE.org

[Built-in TLS certificate-chain verification with CA bundles]

AnalysisAI

CVE-2026-73251 concerns built-in TLS certificate-chain verification involving CA bundles, reported by Ubuntu. The available intelligence is critically sparse - no description of the actual flaw, no CVSS vector, no CWE classification, and no references have been provided. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Unknown

Exploit

Unknown

Impact

Unknown

Access

Unknown

Exploit

Unknown

Impact

Unknown

Vulnerability AssessmentAI

Exploitation	No exploitation conditions can be extracted from the supplied data - the description is a feature label, not a flaw description. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Risk cannot be meaningfully assessed from the available data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	No exploit scenario can be constructed from the available data. The description does not identify the flaw type, attack vector, or required conditions. …
Remediation	No patch version, advisory URL, or workaround information was provided. … Detailed patch versions, workarounds, and compensating controls in full report.