CVE-2026-49457

creationtimestamp| type| source ---|---|--- 2026-08-14 19:04:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eg7myjxaglqtr 2026-08-14 20:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2x5lkplj2o...

CVE-2026-49457 QUIC has Broken TLS verification

erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...

CVE-2026-49457

CVE-2026-49457 affects erlang_quic prior to 1.4.4, where the QUIC client did not authenticate the server during TLS 1.3 handshakes. Specifically, CertificateVerify signature checks were missing, the certificate chain was not validated, and hostname verification was skipped, effectively making ver...