boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-3832

CVE-2026-3832LOW
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  L  N  N    3.7   .0093   59.8     —
AFFECTED
  Product                                                  Versions     Fixed
  gnutls                                                   unspecified  —
  Red Hat Enterprise Linux 10                              unspecified  0:3.8.10-4.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support    unspecified  0:3.8.9-9.el10_0.19
  Red Hat Enterprise Linux 9                               unspecified  0:3.8.10-4.el9_8
  Red Hat Enterprise Linux 9                               unspecified  0:3.8.10-4.el9_8
  Cert Manager support for Red Hat OpenShift release 1.17  unspecified  1791371080
  Cert Manager support for Red Hat OpenShift release 1.17  unspecified  1791371069
  Cert Manager support for Red Hat OpenShift release 1.17  unspecified  1791788287
  Cert Manager support for Red Hat OpenShift release 1.17  unspecified  1791970484
  Cert Manager support for Red Hat OpenShift release 1.18  unspecified  1791459707
  + 21 more
TIMELINE
  Mar 9   Reserved by redhat
  Apr 30  Published (CNA: redhat)
  Aug 21  EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
  Aug 25  EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
  Aug 31  EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
  Sep 1   EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
  Sep 29  EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
  Oct 14  EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
CWE-179 · CNA: redhat · CVSS v3.1 · 18 references · NVD status: Modified

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Lifecycle

Complete event history — 8 events, chronological
DateEventDetail
March 9, 2026ReservedReserved by redhat
April 30, 2026PublishedPublished (CNA: redhat)
August 21, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
August 25, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
August 31, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
September 1, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
September 29, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.
October 14, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added.

Affected

Affected products and packages — 31 rows
VendorProduct / PackageEcosystemVersion introducedFixed
—gnutls———
Red HatRed Hat Enterprise Linux 10——0:3.8.10-4.el10_2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support——0:3.8.9-9.el10_0.19
Red HatRed Hat Enterprise Linux 9——0:3.8.10-4.el9_8
Red HatRed Hat Enterprise Linux 9——0:3.8.10-4.el9_8
Red HatCert Manager support for Red Hat OpenShift release 1.17——1791371080
Red HatCert Manager support for Red Hat OpenShift release 1.17——1791371069
Red HatCert Manager support for Red Hat OpenShift release 1.17——1791788287
Red HatCert Manager support for Red Hat OpenShift release 1.17——1791970484
Red HatCert Manager support for Red Hat OpenShift release 1.18——1791459707
Red HatCert Manager support for Red Hat OpenShift release 1.18——1791459711
Red HatCert Manager support for Red Hat OpenShift release 1.18——1791459759
Red HatCert Manager support for Red Hat OpenShift release 1.18——1789029076
Red HatCert Manager support for Red Hat OpenShift release 1.18——1791966259
Red HatCert Manager support for Red Hat OpenShift release 1.20——1790598593
Red HatRed Hat Discovery 2——1782159791
Red HatRed Hat Discovery 2——1782166952
Red HatRed Hat Hardened Images——3.8.13-1.hum1
Red HatRed Hat Update Infrastructure 5——1781525684
Red HatRed Hat Update Infrastructure 5——1781525671
Red HatRed Hat Update Infrastructure 5——1781525693
Red HatRed Hat Update Infrastructure 5——1781525739
Red HatRed Hat Update Infrastructure 5——1787241211
Red HatRed Hat Update Infrastructure 5——1787135742
Red HatRed Hat Update Infrastructure 5——1787241260
Red HatRed Hat Enterprise Linux 6———
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat OpenShift Container Platform 4———
Red HatRed Hat OpenShift Container Platform 4———
Red HatRed Hat OpenShift Container Platform 4———

Weaknesses

CWE-179

References (18)

Related

Authoritative record: CVE-2026-3832 at cve.org

Vendors: red hat

Weaknesses: CWE-179

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-3832 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.