Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-56862 is a vulnerability classified as Allocation of Resources Without Limits or Throttling, affecting crypto/tls (affected versions: < 1.25.13, 1.26.0-0 – < 1.26.6, and other affected versions). This vulnerability is rated High, with a CVSS score of 7.5. Current sources do not report this vulnerability as exploited.
Analyzing data...
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
