https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:57:59 +0000 https://db.gcve.eu/vuln/cve-2026-106465 <p><strong>Affected:</strong> Eclipse Foundation NetX Duo</p> <p>The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client&#39;s cookie bytes over the value the server issued, and the server then decides whether the client has been verified from the cookie&#39;s length alone. A peer that puts any single cookie byte in its first ClientHello skips the verification exchange entirely, so the server has no return-routability check and completes handshakes for forged source addresses.</p> <p><strong>Affected:</strong> Eclipse Foundation NetX Duo</p> <p>The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client&#39;s cookie bytes over the value the server issued, and the server then decides whether the client has been verified from the cookie&#39;s length alone. A peer that puts any single cookie byte in its first ClientHello skips the verification exchange entirely, so the server has no return-routability check and completes handshakes for forged source addresses.</p> https://db.gcve.eu/vuln/cve-2026-106465