ubuntu · CVE-2026-42012

Quick triage

Priority: medium Published: 2026-04-30 00:00:00 UTC Updated: 2026-05-22 02:35:41 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2026-42012 medium priority: Ubuntu including 1 source packages (gnutls28), 8 status rows across 8 suites (bionic, focal, jammy, noble, questing, resolute, upstream, xenial): released 5, needs-triage 3.

Description:

Certificates containing URI or SRV Subject Alternative Names would fall back to checking DNS hostnames against Common Name, allowing potential misuse of such certificates beyond their original purpose.

cvelogic Threat Intelligence