CVE-2026-88648

EPSS: 0.1% chance of exploitation in the next 30 days.

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.

Published 2026-10-08. Last modified 2026-10-08.