An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).

The vulnerability identified as CVE-2026-95209 affects GnuTLS version 3.0. It causes legitimate CA certificates to be incorrectly rejected during certificate validation, which leads to a Denial of Service (DoS). This flaw impacts the ability of software relying on GnuTLS to establish trusted connections, as valid certificates are not accepted. There is no information on exploit availability or active exploitation in the wild. No patch or remediation details are provided in the available data.

The impact is a Denial of Service caused by the rejection of legitimate CA certificates. This can prevent applications using GnuTLS 3.0 from establishing secure connections, potentially disrupting services that depend on TLS communications. There is no indication of code execution or data compromise from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Users should monitor official Microsoft Security Response Center advisories or GnuTLS project updates for patches addressing this issue.