CVE-2026-42010

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42010
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42010.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42010
Downstream
ALPINE (1)
ALSA (3)
AZL (1)
BELL (1)
CLSA (6)
DEBIAN (1)
ECHO (1)
OESA (5)
openSUSE (2)
RHSA (11)
RLSA (3)
ROOT (2)
SUSE (7)
UBUNTU (1)
Related
ALSA (3)
openSUSE (2)
SUSE (7)
Published
2026-05-07T12:00:05Z
Modified
2026-11-01T02:30:56Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
Gnutls: gnutls: authentication bypass via nul character in username
Details

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-170"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42010.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:3.8.10-4.el10_2"
                        },
                        {
                            "fixed":  "0:3.8.9-9.el10_0.19"
                        },
                        {
                            "fixed":  "0:3.6.16-8.el8_10.6"
                        },
                        {
                            "fixed":  "0:3.6.16-8.el8_10.6"
                        },
                        {
                            "fixed":  "0:3.6.14-10.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_4.1"
                        },
                        {
                            "fixed":  "0:3.6.14-10.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_4.1"
                        },
                        {
                            "fixed":  "0:3.6.16-5.el8_6.5"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_6.2"
                        },
                        {
                            "fixed":  "0:3.6.16-5.el8_6.5"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_6.2"
                        },
                        {
                            "fixed":  "0:3.6.16-7.el8_8.4"
                        },
                        {
                            "fixed":  "0:4.13-4.el8_8.1"
                        },
                        {
                            "fixed":  "0:3.6.16-7.el8_8.4"
                        },
                        {
                            "fixed":  "0:4.13-4.el8_8.1"
                        },
                        {
                            "fixed":  "0:3.8.10-4.el9_8"
                        },
                        {
                            "fixed":  "0:3.8.10-4.el9_8"
                        },
                        {
                            "fixed":  "0:3.7.6-21.el9_2.7"
                        },
                        {
                            "fixed":  "0:3.8.3-4.el9_4.6"
                        },
                        {
                            "fixed":  "0:3.8.3-6.el9_6.4"
                        },
                        {
                            "fixed":  "412.86.202608241157-0"
                        },
                        {
                            "fixed":  "413.92.202609080414-0"
                        },
                        {
                            "fixed":  "414.92.202609011250-0"
                        },
                        {
                            "fixed":  "415.92.202609140326-0"
                        },
                        {
                            "fixed":  "416.94.202608150307-0"
                        },
                        {
                            "fixed":  "417.94.202608250221-0"
                        },
                        {
                            "fixed":  "418.94.202608142238-0"
                        },
                        {
                            "fixed":  "4.19.9.6.202607151909-0"
                        },
                        {
                            "fixed":  "4.20.9.6.202607010620-0"
                        },
                        {
                            "fixed":  "4.21.9.6.202607011303-0"
                        },
                        {
                            "fixed":  "4.22.9.8.202606301732-0"
                        },
                        {
                            "fixed":  "1791371080"
                        },
                        {
                            "fixed":  "1791371069"
                        },
                        {
                            "fixed":  "1791788287"
                        },
                        {
                            "fixed":  "1791970484"
                        },
                        {
                            "fixed":  "1791459707"
                        },
                        {
                            "fixed":  "1791459711"
                        },
                        {
                            "fixed":  "1791459759"
                        },
                        {
                            "fixed":  "1789029076"
                        },
                        {
                            "fixed":  "1791966259"
                        },
                        {
                            "fixed":  "1790598593"
                        },
                        {
                            "fixed":  "1782951051"
                        },
                        {
                            "fixed":  "1782951012"
                        },
                        {
                            "fixed":  "1782951244"
                        },
                        {
                            "fixed":  "1782159791"
                        },
                        {
                            "fixed":  "1782166952"
                        },
                        {
                            "fixed":  "3.8.13-1.hum1"
                        },
                        {
                            "fixed":  "1790703542"
                        },
                        {
                            "fixed":  "1781525684"
                        },
                        {
                            "fixed":  "1781525671"
                        },
                        {
                            "fixed":  "1781525693"
                        },
                        {
                            "fixed":  "1781525739"
                        },
                        {
                            "fixed":  "1787241211"
                        },
                        {
                            "fixed":  "1787135742"
                        },
                        {
                            "fixed":  "1787241260"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.com/gnutls/gnutls

Affected ranges

Type
GIT
Repo
https://gitlab.com/gnutls/gnutls
Events
Introduced
5b595e8e52653f6c5726a4cdd8fddeb6e83804d2
Fixed
b390d80208ed60f1b33ad899475951a8efb40ccd
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "3.6.13"
                },
                {
                    "fixed":  "3.8.13"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Affected versions

3.*
3.6.13
3.6.14
3.7.0
3.7.1
3.7.2
3.7.3
3.7.4
3.7.5
3.7.7
3.7.8
3.8.0
3.8.1
3.8.10
3.8.11
3.8.12
3.8.2
3.8.3
3.8.4
3.8.5
3.8.6
3.8.7
3.8.8
3.8.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42010.json"