CVE-2026-1584: A flaw was found in gnutls

This month

HIGH 7.5REMOTEWATCHLISTMITIGATEMITIGATE

CVE-2026-1584 is a high-severity flaw (CVSS 7.5) affecting gnutls, hardened images. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

Why this priority

High severity
Remotely exploitable, no login, no user action
On your watchlist

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.5 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	1.3% (top 29%)
CISA exploited list	No
Weakness	CWE-476
Published	2026-04-09
Last modified	2026-10-26

Publisher (CNA): Red Hat, Inc. · Vendor: gnu · redhat

Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2026-04-09 18:16 UTCPublished CVE record published
2026-10-26 21:10 UTCUpdated Record last modified

gnu gnutls MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy gnutls || rpm -q gnutls || gnutls --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

redhat hardened images MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy hardened-images || rpm -q hardened-images || hardened-images --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-1584?

gnutls: mitigate or apply the listed mitigation; hardened images: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2026-1584 being exploited?

CVE-2026-1584 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-1584 affect?

CVE-2026-1584 affects gnutls, hardened images. Severity is high (CVSS 7.5). A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a

How urgent is CVE-2026-1584?

Priority 54/100. High severity; Remotely exploitable, no login, no user action; On your watchlist

Software pages

GnuTLS vulnerabilities

Related CVEs

CVE-2026-33845 HIGH 7.5 MITIGATE DOWNGRADE A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leadi
CVE-2026-42010 HIGH 7.1 MITIGATE MITIGATE A flaw was found in gnutls
CVE-2026-3833 MEDIUM 6.5 MITIGATE MITIGATE A flaw was found in gnutls
CVE-2026-3832 LOW 3.7 MITIGATE MITIGATE A flaw was found in gnutls
CVE-2026-42009 HIGH 7.5 MITIGATE MITIGATE A flaw was found in gnutls

References

← Back to latest CVEs