VDB
DEBIAN-CVE-2026-26014
DEBIAN-CVE-2026-26014
PUBLISHED
CVSS 5.900000095367432 MEDIUM
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack". Upgrade to v3.0.11, v3.1.1, or later.
Risk Scores
CVSS v3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | golang-github-pion-dtls.v2 | 2.2.6-1, 0, 0 |
| Debian:12 | golang-github-pion-dtls.v2 | 2.2.6-1, 0, 2.2.6-1 |
| Debian:13 | golang-github-pion-dtls.v2 | 0, 2.2.6-1, 0 |
| Debian:14 | golang-github-pion-dtls-v3 | 3.0.7-2, 3.0.7-1, 0 |
Timeline
- Feb 11, 2026 CVE Published
- May 7, 2026 CVE Updated