https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:36:28.963478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-12428 EUVD-2026-12428 2026-10-02T21:36:28.966190+00:00 EUVD-2026-12428 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2576 fkie_cve-2022-2576 2026-10-02T21:36:28.966221+00:00

In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification (DDoS other peers) and high CPU load (DoS own peer). The misbehavior occurs only with DTLS_VERIFY_PEERS_ON_RESUMPTION_THRESHOLD values larger than 0.

 https://cve.radiocsirt.org/vuln/ghsa-qq3j-44gw-cf6r GHSA-qq3j-44gw-cf6r — Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch 2026-10-02T21:36:28.966251+00:00

Affected: Maven: org.eclipse.californium:californium-core

In Eclipse Californium versions 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRequest. Especially, if used with certificate based cipher suites, that results in message amplification (DDoS other peers) and high CPU load (DoS own peer). The misbehavior occurs only with DTLS_VERIFY_PEERS_ON_RESUMPTION_THRESHOLD values larger than 0.

 https://cve.radiocsirt.org/vuln/gsd-2022-2576 gsd-2022-2576 2026-10-02T21:36:28.966278+00:00 gsd-2022-2576