Lucene search
+L

8 matches found

SUSE CVE
SUSE CVE
added 2026/07/10 3:20 a.m.12 views

SUSE CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

7.4CVSS6.1AI score0.00309EPSS
SaveExploits1References10
NVD
NVD
added 2026/07/03 7:16 a.m.12 views

CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

8.1CVSS0.00309EPSS
SaveExploits1References3
OSV
OSV
added 2026/07/03 7:16 a.m.7 views

ALPINE-CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

8.1CVSS5.9AI score0.00309EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 6:14 a.m.11 views

CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

5.9AI score0.00309EPSS
SaveExploits1References4Affected Software1
AlpineLinux
AlpineLinux
added 2026/07/03 6:14 a.m.12 views

CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

8.1CVSS5.9AI score0.00309EPSS
SaveExploits1References3
OSV
OSV
added 2026/07/03 6:14 a.m.9 views

CVE-2026-8286 wrong STARTTLS connection reuse

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

8.1CVSS6.1AI score0.00309EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/04/24 3:7 a.m.7 views

CVE-2026-41319 MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrary protocol responses across the plaintext-to-TLS trust boundary, enabling SASL authentication...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/04/24 3:7 a.m.37 views

CVE-2026-41319 MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrary protocol responses across the plaintext-to-TLS trust boundary, enabling SASL authentication...

6.5CVSS0.00223EPSS
SaveExploits1References1
Rows per page
Query Builder