CVE-2026-123613

5.3 MEDIUMpublic exploit available

Published 2026-11-08 · Updated 2026-11-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record, because Deframer::aligned does not enforce RFC 8446 record-boundary alignment. A peer or on-path attacker can pack a plaintext EncryptedExtensions with the ServerHello, which rustls accepts unencrypted.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-20

Public exploit & PoC references

https://github.com/rustls/rustls/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc

All references

https://github.com/rustls/rustls/commit/5046bdf8a612b35a2c1a9e168054c1d5c65e7dd7
https://github.com/rustls/rustls/security/advisories/GHSA-2mjx-qc3c-rqvc
https://www.vulncheck.com/advisories/rustls-0.23.13-before-0.23.45-tls-1.3-handshake-encryption-level-bypass

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2020-37289PoC
UNSCOREDCVE-2023-5649
MEDIUMCVE-2024-6423
MEDIUMCVE-2025-31980
MEDIUMCVE-2025-32000
CRITICALCVE-2025-71383
HIGHCVE-2026-100113
HIGHCVE-2026-100117

Related by shared AI tags and CWE weakness class. Browse the full archive.