CVE ID :CVE-2026-112377
Published : Oct. 19, 2026, 6:17 p.m. | 1 hour, 3 minutes ago
Description :CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party’s nonce to a genuine attester and replay its Evidence to impersonate the attested workload and intercept data.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More