THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-3833 (MEDIUM 6.5) — A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can explo

[NVD] CVE-2026-3833 (MEDIUM 6.5) — A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can explo

lownvdPublished 2026-04-30

CVE-2026-3833 CVSS: 6.5 MEDIUM Published: 2026-04-30T18:16:30.577

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing di

Indicators of compromise

CVE-2026-3833cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-3833