CVE-2026-120399 | BDVDB-2026-402972 Detail
Red HatRed Hat Edge Manager 1
Description#
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-1322 Use of Blocking Code in Single-threaded, Non-blocking Context
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.