CVE-2026-88648

None

CVSS

—

EPSS

0.2%

Published

Oct 8, 2026

CISA due date

—

The record

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.

Affected packages

Ecosystem	Package	Introduced	Fixed