CVE-2026-92843

Name of the Vulnerable Software and Affected Versions NetX Secure (affected versions not specified)

Description A missing bounds check in the TLS 1.3 Certificate-message parser allows a malicious TLS 1.3 server to trigger an unsigned-integer underflow. This leads to a heap out-of-bounds read in any peer processing a remote Certificate message. The issue is reachable pre-authentication during the standard handshake process, occurring before certificate verification is completed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.