CVE-2026-24904

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In "tlslistener.rs", "TlsListener::listen" peeks 1024 bytes and calls "extractclientrandom...". If "parsetlsplaintext" fails for example, a fragmented/partial ClientHello split across TCP writes,...