VULNERABILITY INTELLIGENCE

CVE-2026-54908

EPSS probability0.54%
CISA KEVNot currently listed
Published2026-07-01
Last modified2026-10-25

Description

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.

Weakness classification

  • security-advisories@github.com: CWE-125

Primary references