BELL-CVE-2026-56862

Bulletin has no description...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, cephcsi-fips, frankenphp-8.4, tofu-controller-fips, chronyexporter, mlrun-log-collector-fips, crossplane-provider-aws-sns, tbot, crossplane-provider-azure-servicefabric, grafana-elasticsearch-datasource,...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: kube-bench, nri-kafka, eksctl, rancher-helm, haproxy-ingress, nri-haproxy, weaviate, metrics-agent, crossplane-provider-keycloak, jaeger-operator, helm-mapkubeapis, newrelic-infra-operator, fscrypt, chart-testing, aws-flb-firehose, tailscale, knative-client,...

CVE-2026-56862

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:14+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24dvdrwe2w 2026-08-22 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa3gkdqm2e...

CVE-2026-56862

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...