CVE-2026-5260 – Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

CVE ID :CVE-2026-5260

Published : May 26, 2026, 10:16 p.m. | 15 minutes ago

Description :A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.

Severity: 8.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…