Lucene search
+L

37 matches found

OSV
OSV
added 2026/02/20 2:50 a.m.9 views

CVE-2026-26994 uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. In versions 1.6.7 and below, uTLS did not implement the TLS 1.3 downgrade protection mechanism specified in RFC 8446 Section 4.1.3 when using a uTLS ClientHello spe...

6.5CVSS5.4AI score0.00268EPSS
SaveExploits0References6
Rows per page
Query Builder