CVE-2026-3832: gnu gnutls

Vulnerability summary

CVE-2026-3832 is a low (CVSS 3.7) vulnerability in gnu gnutls. EPSS estimates a 0.93% chance of exploitation in the next 30 days, higher than 59.7% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 30-04-2026
   PublishedVulnerability first disclosed.
2. 14-10-2026
   Last modifiedVulnerability information updated.

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

• CWE-179Incorrect Behavior Order: Early ValidationThe product validates input before applying protection mechanisms that modify the input, which could allow an attacker to bypass the validation via dangerous inputs that only arise after the modification.