Posted by Tomasz Kaye on Nov 05 CVE-2026-123017 was assigned on 2026-11-05 and is published: https://www.cve.org/CVERecord?id=CVE-2026-123017 The published record scores it 6.5, with Integrity Low. I have asked MITRE's CNA-LR desk to raise Integrity to High - that gives 8.2 - Because the stock host refused the forged command from the attacker's own peer ID and ran it once the handshake claimed 1. A correction to the original post.

Read the full article at oss-security →