CVE-2026-92853

Name of the Vulnerable Software and Affected Versions NetX Secure (affected versions not specified)

Description The TLS 1.3 Certificate-message parser fails to verify if a message contains a byte to skip before decrementing the message length to bypass a context byte. When a zero-length Certificate message is processed, the unsigned length wraps to 0xFFFFFFFF, rendering the subsequent bounds check ineffective and causing the parser to read beyond the session packet buffer. This issue is reachable pre-authentication and can be triggered by a four-byte handshake header without requiring cryptographic validity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.