{"id":"CVE-2026-3832","aliases":[],"cve":{"records":[{"id":"CVE-2026-3832","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-03-09T13:44:37.841Z","published":"2026-04-30T17:41:28.896Z","modified":"2026-11-06T18:59:58.381Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-06T18:59:58.381Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-05-18T20:22:06.192Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:13274","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:20612","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:20613","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:26409","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-3832","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445762","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1801","tags":[],"source":"redhat"},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1801","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-179","description":"Incorrect Behavior Order: Early Validation","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-04-30T18:22:07.438915Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.","score":3.7,"severity":"low","published":"2026-04-30T17:41:28.896Z","modified":"2026-11-06T18:59:58.381Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"gnutls","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"3.8.13","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[{"version":"0:3.8.10-4.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10.0 Extended Update Support","platforms":[],"versions":[{"version":"0:3.8.9-9.el10_0.19","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:3.8.10-4.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:3.8.10-4.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.17","platforms":[],"versions":[{"version":"1791371080","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.17","platforms":[],"versions":[{"version":"1791371069","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.17","platforms":[],"versions":[{"version":"1791788287","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.17","platforms":[],"versions":[{"version":"1791970484","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.18","platforms":[],"versions":[{"version":"1791459707","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.18","platforms":[],"versions":[{"version":"1791459711","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.18","platforms":[],"versions":[{"version":"1791459759","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.18","platforms":[],"versions":[{"version":"1789029076","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.18","platforms":[],"versions":[{"version":"1791966259","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Cert Manager support for Red Hat OpenShift release 1.20","platforms":[],"versions":[{"version":"1790598593","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Discovery 2","platforms":[],"versions":[{"version":"1782159791","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:discovery:2::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Discovery 2","platforms":[],"versions":[{"version":"1782166952","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:discovery:2::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Hardened Images","platforms":[],"versions":[{"version":"3.8.13-1.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:hummingbird:1"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1781525684","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1781525671","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1781525693","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1781525739","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1787241211","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1787135742","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Update Infrastructure 5","platforms":[],"versions":[{"version":"1787241260","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhui:5::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:rhel_els:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"unknown","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"},{"vendor":"Red Hat","name":"Red Hat OpenShift Container Platform 4","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift:4"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"}],"remediation":[{"text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"}],"references":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-3832","https://bugzilla.redhat.com/show_bug.cgi?id=2445762","https://gitlab.com/gnutls/gnutls/-/issues/1801"],"sources":[{"name":"CVE","id":"CVE-2026-3832","modified":"2026-11-06T18:59:58.381Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":3.7}],"sourceAffected":[],"observedAt":"2026-11-06T19:54:39.829Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:55:32.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-06T21:40:32.076Z","attemptedAt":"2026-11-06T21:40:32.076Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-06T21:40:32.844Z","attemptedAt":"2026-11-06T21:40:32.844Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-06T21:40:32.046Z","attemptedAt":"2026-11-06T21:40:32.046Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-06T21:40:32.491Z","attemptedAt":"2026-11-06T21:40:32.491Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-26402","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26402","modified":"Nov 6, 2026, 6:59:58 PM","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-06T21:40:32.046Z"},{"source":"NVD","id":"CVE-2026-3832","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3832","modified":"2026-11-06T19:17:50.470","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-06T21:40:32.076Z"},{"source":"FIRST EPSS","id":"CVE-2026-3832","url":"https://www.first.org/epss/","probability":0.00804,"percentile":0.56914,"date":"2026-11-06","checkedAt":"2026-11-06T21:40:32.491Z"},{"source":"GitHub Advisory Database","id":"GHSA-3rqj-4qqw-jgwr","url":"https://github.com/advisories/GHSA-3rqj-4qqw-jgwr","modified":"2026-10-14T21:32:24Z","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-06T21:40:32.844Z"}],"aiSummary":{"text":"A flaw in gnutls may allow a remote attacker to bypass security by presenting a crafted OCSP response, potentially leading to acceptance of a revoked server certificate. The vulnerability affects gnutls versions less than 3.8.13. A logic error in processing multi-record OCSP responses is the cause.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-06T20:36:43.147Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-3832"}]}}