CVE-2026-88648: Incomplete X.509 certificate validation in GnuTLS

CVE-2026-88648 is associated with CWE-295 (Improper Certificate Validation). The incomplete X.509 implementation in GnuTLS v3.8.13 allows an attacker controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.