CVE-2026-1584

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

• CWE-476
• CWE-476

• https://access.redhat.com/errata/RHSA-2026:7477
• https://access.redhat.com/security/cve/CVE-2026-1584Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2435258Issue Tracking, Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:7477
• https://access.redhat.com/security/cve/CVE-2026-1584Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2435258Issue Tracking, Vendor Advisory
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1584.json

Published

Apr 9, 2026

Last Modified

Jul 15, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1582The WP All Export plugin for WordPress is vulnerable to Sens…3.7
• CVE-2026-15821The SureDash – Community, Courses & Member Dashboard plugin …6.4
• CVE-2026-15827The GutenKit Blocks plugin for WordPress is vulnerable to un…5.3
• CVE-2026-15829A SQL injection (CWE-89) and security boundary bypass (CWE-8…8.6
• CVE-2026-15830An issue was discovered in Django 5.2 before 5.2.17 and 6.0 …6.9
• CVE-2026-15831GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-1585An unquoted Windows service executable path vulnerability in…8.4
• CVE-2026-1586A flaw has been found in Open5GS up to 2.7.5. Impacted is th…7.5
• CVE-2026-1587A vulnerability has been found in Open5GS up to 2.7.6. The a…7.5
• CVE-2026-1588A vulnerability was found in jishenghua jshERP up to 3.6. Th…2.7
• CVE-2026-1589A vulnerability was determined in itsourcecode School Manage…9.8
• CVE-2026-15895OS command injection in the npm package loading component in…8.4