Skip to content
cyberLOW2026-05-11 06:16 UTC

CVE-2026-1677 - net: TLS 1.2 connections allowed on TLS 1.3 sockets

CVE ID :CVE-2026-1677 Published : May 11, 2026, 6:16 a.m. | 49 minutes ago Description :Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to mbedTLS

ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD

Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.

GET THE SUNDAY BRIEFING →

RELATED · cyber