CVE-2026-10028Patch

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular issuer relationships, can cause an infinite loop during certificate verification. The unbounded traversal consumes excessive CPU resources, leading to a denial of service for the affected process or worker.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-835

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-18: 1Patch / Workaround · 2026-06-18: 1Technical Details · 2026-06-18: 106-18
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Ferramentas Linux@Cezar_H_Linux
    Patch

    🛡️ CVE-2026-10028 no #SUSE Linux: cadeia de certificados circular pode travar seus serviços TLS. Aprenda a verificar, corrigir com um script automático e mitigar sem reboot. Guia completo com comandos reais e recomendações de segurança. Saiba Mais -> http://tinyurl.com/2dnsb8rw https://t.co/35IYj8zgh7

    Post summary

    The tweet announces CVE‑2026‑10028 in SUSE Linux, describes a circular certificate chain that can crash TLS services, and provides a script-based fix and mitigation steps.

    1000056
    1.5K followersView on X

Explore more