← Database

CVE-2026-73064

LOW CVSS: 2.9 Published: 2026-09-24 Modified: 2026-09-24

Description

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

Affected Platforms

Unknown

Weakness Type

CWE-394

References