CVE-2026-75806

A flaw in OpenSSL allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by terminating an active DTLS 1.2 session using an AEAD cipher suite. The vulnerability arises because the record layer fails to validate that a record is long enough to contain the mandatory explicit I...

EUVD-2026-89011

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...