VDB

GO-2026-4870

GO-2026-4870 PUBLISHED CVSS 8.600000381469727 HIGH

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Risk Scores

CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
chainguardcilium-envoy-1.180, 0
chainguardcilium-envoy-fips-1.180, 0
chainguardkubernetes-csi-livenessprobe-fips0, 0
wolfivelero-plugin-for-aws*, *, *
chainguardneuvector-scanner0, 0
chainguardkubernetes-csi-driver-nfs0, 0
chainguardneuvector-sigstore-interface-fips0, 0
chainguardrancher-security-scan-fips-0.9*, *
chainguardmattermost-fips-10.120, 0
chainguardkarpenter-fips-1.90, 0
chainguardopencost0, 0
chainguardterraform-provider-azuread0, 0
chainguardvault-k8s-fips0, 0
chainguardomnibump0, 0
chainguardknative-serving-fips-1.190, 0
wolfikarpenter-1.110, 0, 0
chainguardprometheus-statsd-exporter-fips-0.220, 0
chainguardcert-manager-1.200, 0
chainguardrabbitmq-default-user-credential-updater0, 0
chainguardnewrelic-k8s-metadata-injection0, 0

…and 2275 more

Timeline

  • Apr 7, 2026 CVE Published
  • Aug 27, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›