SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-5260

HIGH · CVSS 8.2 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-05-26 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.2. It affects Exchange. It may be remotely exploitable.

CVE
CVE-2026-5260
Severity
HIGH
CVSS
8.2
EPSS
0.73%
Exchange

Original NVD Description

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.