CVE-2026-42505

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Handshakes using Encrypted Client Hello (ECH), a mechanism designed to encrypt the initial handshake of a TLS connection to protect client privacy, could be de-anonymized by a passive network observer. This occurs because pre-shared key identities are disclosed within the unencrypted portion of the client hello.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.