PT-2026-51745

CVE-2026-8286

·

Published

2026-06-24

·

Updated

2026-10-19

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)
Description A flaw exists where a new transfer utilizing STARTTLS to upgrade the connection may incorrectly reuse an existing live connection despite a mismatch in the TLS configuration.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-295: Improper Certificate Validation
Related identifiers
CVE-2026-8286
ALSA-2026:55439
ALSA-2026:57462
AZL-91815
AZL-91842
CLSA-2026-1783341627
CLSA-2026-1783937768
CLSA-2026-1785319688
CLSA-2026-1785320042
CLSA-2026-1785400317
CLSA-2026-1785400806
CLSA-2026-1785421291
CLSA-2026-1785499004
CLSA-2026-1785502239
CLSA-2026-1786027831
CLSA-2026-1786119141
CLSA-2026-1786464575
CLSA-2026-1790236735
ECHO-6486-9A91-3077
JLSEC-2026-1211
OESA-2026-2984
OESA-2026-2985
OESA-2026-2986
OESA-2026-2987
OESA-2026-2988
OPENSUSE-SU-2026:11230-1
OPENSUSE-SU-2026:21272-1
RHSA-2026:29017
RHSA-2026:34975
RHSA-2026:57462
SUSE-SU-2026:22553-1
SUSE-SU-2026:22582-1
SUSE-SU-2026:22709-1
SUSE-SU-2026:22889-1
SUSE-SU-2026:2925-1
SUSE-SU-2026:2926-1
SUSE-SU-2026:3043-1
SUSE-SU-2026:3814-1
USN-8487-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com