What is CVE-2026-95210?

CVE-2026-95210 is a security advisory published by Microsoft Security Response Center (MSRC) with Low severity. Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.

Which CVE IDs does CVE-2026-95210 cover?

CVE-2026-95210 covers the following CVE IDs: CVE-2026-95210. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-95210?

CVE-2026-95210 has a CVSS v3 base score of 3.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-95210?

CVE-2026-95210 affects 1 product, including: azl3 gnutls 3.8.13-1 on Azure Linux 3.0.

CVE-2026-95210LowCVSS 3.7

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.

Vendor

Microsoft Security Response Center (MSRC)

Published

October 11, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-95210 →

🎯 Affected products1

azl3 gnutls 3.8.13-1 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95210
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade