Lucene search
+L

1 matches found

Cvelist
Cvelist
โ€ขadded 2026/07/02 4:6 p.m.โ€ข39 views

CVE-2026-54887 DTLS server cookie bypass during startup window due to empty initial cookie secret

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...

6.3CVSS0.00243EPSS
SaveExploits0References5
Rows per page
Query Builder