CVE-2026-42011 — GnuTLS: security bypass due to incorrect name constraint handling

A flaw was found in GnuTLS that could cause permitted name constraints to be incorrectly ignored when previous Certificate Authorities had only excluded name constraints. A remote attacker could bypass critical name constraint checks during certificate validation. This could result in the acceptance of invalid certificates and potentially enable spoofing or man-in-the-middle attacks against affected systems.