CLEANSTART-2026-UK11127 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

🗓️ 25 Feb 2026 00:52:43Reported by GoogleType

osv🔗 osv.dev👁 25 Views

Spark operator TLS flaw lets resumed handshakes succeed if Client Certificate Authorities or Root Certificate Authorities mutate.

Reporter	Title	Published	Views	Family All 3960
OSV	MINI-CF8G-G84P-PH66	1 Feb 202615:02	–	osv
OSV	MINI-CFH8-JFW5-QQ43	4 Mar 202605:28	–	osv
OSV	MINI-CFHR-RV9G-H7PX	4 Mar 202605:30	–	osv
OSV	MINI-CFRQ-HX78-RCVV	4 Mar 202605:26	–	osv
OSV	MINI-CFW4-F9CG-64VM	31 Jan 202614:17	–	osv
OSV	MINI-CG4Q-525M-5RH4	4 Mar 202605:30	–	osv
OSV	MINI-CG88-PXC5-5RVM	31 Jan 202614:04	–	osv
OSV	MINI-CGCM-J68V-P743	11 Feb 202601:34	–	osv
OSV	MINI-CGXW-7GV8-R9HR	4 Mar 202605:30	–	osv
OSV	MINI-CH32-HWWF-7C2G	1 Feb 202601:37	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UK11127
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68121
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61726
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61728
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61730
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68121

20 May 2026 18:15Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.19.8

EPSS0.01945