CVE-2026-120399

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections...

EUVD-2026-121145

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections...

CVE-2026-120399

A flaw in flightctl allows a network-reachable unauthenticated client to perform a Denial of Service (DoS) attack. The issue stems from a TLS handshake being performed synchronously within the HTTP server’s connection-context callback without a deadline. By stalling the handshake, an attacker can...

CVE-2026-120399

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections. Mitigation The servic...

CVE-2026-120399: Red Hat Red Hat Edge Manager 1: A flaw was found in flightctl

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections...

PT-2026-141719

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections...