A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Gnu
  • Gnutls
Redhat
  • Cert Manager
  • Discovery
  • Enterprise Linux
  • Enterprise Linux Eus
  • Hardened Images
  • Hummingbird
  • Openshift
  • Openshift Ai
  • Openshift Container Platform
  • Rhel Aus
  • Rhel E4s
  • Rhel Els
  • Rhel Eus
  • Rhel Eus Long Life
  • Rhel Tus
  • Rhui

Configuration 1 [-]

OR cpe:2.3:a:gnu:gnutls:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

No data.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:13274 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:20611 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:20612 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:20613 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:26319 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:26409 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:29197 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:30004 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:30849 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:30850 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:32962 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:33125 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:41921 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:43575 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:57402 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:58981 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:59831 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:60019 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:62409 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:62549 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65839 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65851 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:67857 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72502 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74674 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82304 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82322 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82347 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82354 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82372 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82857 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82888 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-3833 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2445763 cve-icon cve-icon
https://gitlab.com/gnutls/gnutls/-/issues/1803 cve-icon cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-3833 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-3833 cve-icon
History

Wed, 14 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
References

Wed, 14 Oct 2026 03:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:cert_manager:1.17::el9
cpe:/a:redhat:cert_manager:1.18::el9
References

Fri, 02 Oct 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat openshift Ai
CPEs cpe:/a:redhat:openshift_ai:3.4::el9
Vendors & Products Redhat openshift Ai
References

Tue, 29 Sep 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat cert Manager
CPEs cpe:/a:redhat:cert_manager:1.20::el9
Vendors & Products Redhat cert Manager
References

Mon, 28 Sep 2026 02:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.15::el9
References

Thu, 17 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.13::el9
References

Thu, 17 Sep 2026 08:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.18::el9
References

Mon, 14 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.14::el9
References

Thu, 10 Sep 2026 10:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.16::el9
References

Thu, 03 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.17::el9
References

Thu, 03 Sep 2026 12:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.12::el8
References

Wed, 26 Aug 2026 23:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.19::el9
References

Tue, 25 Aug 2026 10:00:00 +0000

Type Values Removed Values Added
References

Wed, 22 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
References

Mon, 20 Jul 2026 11:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
References

Tue, 30 Jun 2026 03:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
cpe:/o:redhat:rhel_aus:8.4::baseos
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
References

Mon, 29 Jun 2026 12:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_e4s:9.4::appstream
cpe:/o:redhat:rhel_e4s:9.4::baseos
References

Mon, 29 Jun 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Eus Long Life
Redhat rhel Tus
CPEs cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream
cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/o:redhat:rhel_aus:8.6::baseos
cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
Vendors & Products Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Eus Long Life
Redhat rhel Tus
References

Fri, 26 Jun 2026 07:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.6::appstream
cpe:/o:redhat:rhel_eus:9.6::baseos
Vendors & Products Redhat rhel Eus
References

Wed, 24 Jun 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:2::el9
Vendors & Products Redhat discovery
References

Tue, 16 Jun 2026 22:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Eus
Redhat rhui
CPEs cpe:/a:redhat:rhui:5::el9
cpe:/o:redhat:enterprise_linux_eus:10.0
Vendors & Products Redhat enterprise Linux Eus
Redhat rhui
References

Tue, 02 Jun 2026 15:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
References

Mon, 01 Jun 2026 20:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:10.2
References

Wed, 27 May 2026 03:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/o:redhat:enterprise_linux:8::baseos
References

Thu, 07 May 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Gnu
Gnu gnutls
CPEs cpe:2.3:a:gnu:gnutls:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Vendors & Products Gnu
Gnu gnutls

Sun, 03 May 2026 19:45:00 +0000

Type Values Removed Values Added
References

Fri, 01 May 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat hardened Images
Redhat openshift Container Platform
Vendors & Products Redhat hardened Images
Redhat openshift Container Platform

Fri, 01 May 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 30 Apr 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 30 Apr 2026 18:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
Title Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
First Time appeared Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openshift
Weaknesses CWE-178
CPEs cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openshift
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2026-04-30T17:37:05.818Z

Updated: 2026-10-14T19:24:09.620Z

Reserved: 2026-03-09T14:00:51.698Z

Link: CVE-2026-3833

cve-icon Vulnrichment

Updated: 2026-04-30T18:37:51.941Z

cve-icon NVD

Status : Modified

Published: 2026-04-30T18:16:30.577

Modified: 2026-10-14T20:17:37.933

Link: CVE-2026-3833

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-04-30T17:26:28Z

Links: CVE-2026-3833 - Bugzilla