https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:51:41.472887+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0873 certfr-2026-avi-0873 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-06T05:51:41.476709+00:00 certfr-2026-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-332375 EUVD-2026-332375 2026-10-06T05:51:41.476744+00:00 EUVD-2026-332375 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54908 fkie_cve-2026-54908 2026-10-06T05:51:41.476759+00:00

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.

 https://cve.radiocsirt.org/vuln/ghsa-wg4g-wm44-ch5j GHSA-wg4g-wm44-ch5j — Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message 2026-10-06T05:51:41.476786+00:00

Affected: Go: github.com/pion/dtls/v3

### Impact Remote denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message.

### Patches Upgrade to v3.1.4 or later. This version includes this patch https://github.com/pion/dtls/pull/839 which fixes the issue.

### Workarounds No work around; please upgrade to v3.1.4 or a newer version.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-54908 msrc_CVE-2026-54908 — Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message 2026-10-06T05:51:41.476811+00:00 msrc_CVE-2026-54908 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54908 UBUNTU-CVE-2026-54908 2026-10-06T05:51:41.476827+00:00

Affected: Ubuntu:24.04:LTS: golang-github-pion-dtls.v2, Ubuntu:25.10: golang-github-pion-dtls.v2, Ubuntu:26.04:LTS: golang-github-pion-dtls-v3, Ubuntu:26.04:LTS: golang-github-pion-dtls.v2

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.