PatchTheCVECVE-2026-5260: A flaw was found in libgnutls
49
This month
HIGH 8.2REMOTE
CVE-2026-5260 is a high-severity flaw (CVSS 8.2) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.2 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.9% (top 39%) |
| CISA exploited list | No |
| Weakness | CWE-126 |
| Published | 2026-05-26 |
| Last modified | 2026-10-22 |
Publisher (CNA): Red Hat, Inc.
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Ubuntu 20.04 · gnutls28 · FIXED · 3.6.13-2ubuntu1.12+esm2
sudo apt update && sudo apt install --only-upgrade gnutls28
dpkg --compare-versions "$(dpkg-query -W -f='${Version}' gnutls28)" ge "3.6.13-2ubuntu1.12+esm2" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 22.04 · gnutls28 · FIXED · 3.7.3-4ubuntu1.9
sudo apt update && sudo apt install --only-upgrade gnutls28
dpkg --compare-versions "$(dpkg-query -W -f='${Version}' gnutls28)" ge "3.7.3-4ubuntu1.9" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 24.04 · gnutls28 · FIXED · 3.8.3-1.1ubuntu3.6
sudo apt update && sudo apt install --only-upgrade gnutls28
dpkg --compare-versions "$(dpkg-query -W -f='${Version}' gnutls28)" ge "3.8.3-1.1ubuntu3.6" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 25.10 · gnutls28 · FIXED · 3.8.9-3ubuntu2.2
sudo apt update && sudo apt install --only-upgrade gnutls28
dpkg --compare-versions "$(dpkg-query -W -f='${Version}' gnutls28)" ge "3.8.9-3ubuntu2.2" && echo PATCHED || echo STILL-VULNERABLE
Debian 12 · gnutls28 · FIXED · 3.7.9-2+deb12u7
sudo apt update && sudo apt install --only-upgrade gnutls28
dpkg --compare-versions "$(dpkg-query -W -f='${Version}' gnutls28)" ge "3.7.9-2+deb12u7" && echo PATCHED || echo STILL-VULNERABLE
Debian 13 · gnutls28 · FIXED · 3.8.9-3+deb13u4
sudo apt update && sudo apt install --only-upgrade gnutls28
dpkg --compare-versions "$(dpkg-query -W -f='${Version}' gnutls28)" ge "3.8.9-3+deb13u4" && echo PATCHED || echo STILL-VULNERABLE
RHEL 10 · gnutls · FIXED · gnutls-3.8.10-4.el10_2
sudo dnf upgrade --advisory=RHSA-2026:20613
rpm -q gnutls
RHEL 10.0 Extended Update Support · gnutls · FIXED · gnutls-3.8.9-9.el10_0.19
sudo dnf upgrade --advisory=RHSA-2026:26409
rpm -q gnutls
RHEL 8 · gnutls · FIXED · gnutls-3.6.16-8.el8_10.6
sudo dnf upgrade --advisory=RHSA-2026:20611
rpm -q gnutls
RHEL 8.4 Advanced Mission Critical Update Support · gnutls · FIXED · gnutls-3.6.14-10.el8_4.1
sudo dnf upgrade --advisory=RHSA-2026:33125
rpm -q gnutls
RHEL 8.4 Advanced Mission Critical Update Support · libtasn1 · FIXED · libtasn1-4.13-3.el8_4.1
sudo dnf upgrade --advisory=RHSA-2026:33125
rpm -q libtasn1
Alpine 3.20 · gnutls · FIXED · gnutls-3.8.13-r0
apk add --upgrade gnutls
apk info -v gnutls
Alpine 3.21 · gnutls · FIXED · gnutls-3.8.13-r0
apk add --upgrade gnutls
apk info -v gnutls
Alpine 3.22 · gnutls · FIXED · gnutls-3.8.13-r0
apk add --upgrade gnutls
apk info -v gnutls
Alpine 3.23 · gnutls · FIXED · gnutls-3.8.13-r0
apk add --upgrade gnutls
apk info -v gnutls
sudo dnf update --advisory=ALAS2023-2026-1757
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.