AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-56862

HIGH · CVSS 7.5 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

The vulnerability allows a malicious client to continuously send KeyUpdate messages, causing the server to perform key derivation operations without end, potentially leading to resource exhaustion and denial of service. This issue affects unspecified products that utilize handshake messages in their protocol. Organizations relying on these protocols should prioritize addressing this vulnerability to mitigate the risk of service disruption.

CVE
CVE-2026-56862
Severity
HIGH
CVSS
7.5
EPSS
0.18%

Original NVD Description

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.