GnuTLS CVE-2026-88647

Exploitation requires the attacker to occupy a man-in-the-middle position on the TLS connection between a GnuTLS 3.8.13 client and its intended server, and to supply a crafted certificate that triggers the Common Name fallback path in hostname verification. The key limiting factor is this MITM prerequisite - the flaw does not permit remote compromise of an arbitrary host without traffic interception. It specifically affects deployments using the vulnerable GnuTLS 3.8.13 for client-side certificate hostname validation; the exact vulnerable-version range and any fixed release cannot be confirmed because the input CPE and affected-version fields are 'n/a'. No victim user interaction beyond initiating the normal TLS connection is required.

Signals conflict and warrant careful interpretation. The NVD CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:N, score 9.1) portrays a trivially exploitable network flaw, but the vulnerability class (CWE-297, improper hostname/host-mismatch validation enabling eavesdropping via a crafted certificate) inherently requires the attacker to already hold a man-in-the-middle position on the victim's traffic - a precondition the AC:L rating arguably understates; a more defensible complexity is AC:H. The EPSS score is very low (0.11%, 1st percentile), indicating the modeling community sees little sign of imminent mass exploitation, and the CVE is NOT on CISA KEV, so there is no confirmed active exploitation. One of the references is a GitHub gist, which MAY contain proof-of-concept material, but the input provides no explicit POC flag and its contents are unverified. Net assessment: this is a genuine security-relevant TLS trust-bypass in a widely deployed library and should be patched, but the real-world priority is tempered by the MITM precondition and low EPSS - treat it as important-to-patch rather than an emergency drop-everything issue absent evidence the gist is a working exploit. Note also the metadata is badly degraded (CPE and affected-version fields are literally 'n/a'), so affected-version scoping cannot be confirmed from the provided data.

An attacker positioned on the network path between a GnuTLS 3.8.13 client and its intended server (e.g., on shared Wi-Fi, a compromised router, or via DNS/ARP spoofing) presents a crafted certificate that abuses the Common Name fallback logic to pass hostname verification for a host it does not legitimately represent. The client accepts the TLS session as valid, letting the attacker decrypt and eavesdrop on (and potentially tamper with) the supposedly protected communications. A referenced public gist may contain proof-of-concept certificate material, but its status as a working exploit is not confirmed in the provided data.