CVE-2026-42505 | BDVDB-2026-346202 Detail
Go standard librarycrypto/tls
Description#
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-201 Insertion of Sensitive Information Into Sent Data
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.