CVE-2026-11703

Missing SNI/ALPN binding on stateful session-ID resumption, which previously skipped the binding check performed for ticket-based resumption. A cached session could be resumed under a different SNI/ALPN than originally negotiated and, where client-authentication policy differs across virtual host...

PT-2022-17495

Name of the Vulnerable Software and Affected Versions Eclipse Californium versions 2.0.0 through 2.7.2 Eclipse Californium versions 3.0.0 through 3.5.0 Description The issue occurs when a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a...