CVE-2026-95210

Critical severity, CVSS 9.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.

Published 2026-10-08. Last modified 2026-10-08.