CVE WatchOct 30, 2026

CVE-2026-42010

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing

CVSS

7.1

High

EPSS

1.1%

p64

KEV

—

Exploit Today

0-100

Published: May 7, 2026 · Last modified: Oct 30, 2026 · CWE-170 · CWE-626

EPSS · 30d

0.9%EPSS · 30 days1.1%

2026-10-012026-10-29

Technical description

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-116130—

—

———HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS parser URL-decodes the request path and measures the result with strlen(), so PATH_INFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacker can send a path that a proxy or filter checks in full while the application routes on a shorter one.7h CVE-2026-571856.5 MED

41.2%

——12Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP MWI body parser` by sending a carefully crafted `SIP NOTIFY` request. The attacker must pass SIP authentication using either a username/password or `source IP address matching`. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.2d CVE-2026-1144573.7 LOW

30.8%

——9A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded input, the module reads past allocated memory boundaries, which can cause an Apache worker process to crash.4d CVE-2026-968605.5 MED

32.7%

——10Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.2d CVE-2026-968505.5 MED

38.2%

——11Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.14d CVE-2026-837817.8 HIG

29.9%

——9Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.17d