PT-2026-7242
CVE-2026-1584
·
Published
2026-01-01
·
Updated
2026-08-31
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
(affected versions not specified)
Description
A flaw exists related to pre-shared key (PSK) binder verification during Transport Layer Security (TLS) 1.3 resumption attempts. The issue is triggered when an invalid PSK binder value is present in the ClientHello message, potentially leading to a denial of service (DoS) condition.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾