Name: CVE-2026-42505: Insertion of Sensitive Information Into Sent Data
Creator: Rapid7
Published: 2026-07-08T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-42505, CWE-201, CVSS 5.3, EPSS 0.00382

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade golang-raceUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade go-toolsetUpgrade golang-miscUpgrade git-lfsUpgrade golang	Oct 11, 2026	Jul 9, 2026
Alpine Linux	—	Upgrade go	Sep 7, 2026	Jul 8, 2026
Amazon Linux Ami 2	—	Upgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade runfinch-finchUpgrade golistUpgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golist-debuginfo	Jul 22, 2026	Jul 22, 2026
Amazon_linux_2023	—	Upgrade credentials-fetcherUpgrade docker-debuginfoUpgrade nerdctlUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-burntsushi-tomlUpgrade golang-github-burntsushi-toml-test-develUpgrade golang-github-burntsushi-toml-testUpgrade golang-miscUpgrade docker-debugsourceUpgrade golang-srcUpgrade runfinch-finchUpgrade rcloneUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade runc-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golangUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golang-testsUpgrade oci-add-hooksUpgrade golang-sharedUpgrade golist-debugsourceUpgrade containerdUpgrade runcUpgrade rclone-debugsourceUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade oci-add-hooks-debugsourceUpgrade dockerUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-binUpgrade golang-docsUpgrade containerd-stressUpgrade amazon-ecr-credential-helperUpgrade rclone-debuginfoUpgrade soci-snapshotterUpgrade golistUpgrade golang-github-burntsushi-toml-develUpgrade containerd-debugsourceUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade runc-debuginfoUpgrade containerd-stress-debuginfoUpgrade oci-add-hooks-debuginfo	Jul 21, 2026	Jul 8, 2026
Redhat_linux	—	Upgrade golang-testsUpgrade delve-debugsourceNo solution existsUpgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade delveUpgrade golang-miscUpgrade golang-src	Sep 2, 2026	Jul 8, 2026
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Aug 13, 2026	Jul 8, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence