Name: CVE-2026-42505: Insertion of Sensitive Information Into Sent Data
Creator: Rapid7
Published: 2026-07-08T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-42505, CWE-201, CVSS 5.3, EPSS 0.00382

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade git-lfsUpgrade go-toolsetUpgrade golang-src	Oct 11, 2026	Jul 9, 2026
Alpine Linux	—	Upgrade go	Sep 7, 2026	Jul 8, 2026
Amazon Linux Ami 2	—	Upgrade golang-srcUpgrade golangUpgrade golist-debuginfoUpgrade golang-miscUpgrade golistUpgrade runfinch-finchUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade amazon-cloudwatch-agent	Jul 22, 2026	Jul 22, 2026
Amazon_linux_2023	—	Upgrade runcUpgrade containerdUpgrade containerd-stress-debuginfoUpgrade golist-debugsourceUpgrade rclone-debugsourceUpgrade containerd-debuginfoUpgrade soci-snapshotterUpgrade golistUpgrade containerd-debugsourceUpgrade amazon-ssm-agentUpgrade golang-github-burntsushi-toml-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade runc-debuginfoUpgrade golang-sharedUpgrade containerd-stressUpgrade oci-add-hooksUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade golang-docsUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade golang-binUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade rclone-debuginfoUpgrade dockerUpgrade golang-github-burntsushi-toml-debugsourceUpgrade golang-testsUpgrade golang-github-burntsushi-toml-test-develUpgrade nerdctlUpgrade runfinch-finchUpgrade rcloneUpgrade golang-srcUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-burntsushi-toml-testUpgrade docker-debuginfoUpgrade runc-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-burntsushi-tomlUpgrade docker-debugsourceUpgrade golang-miscUpgrade credentials-fetcherUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golang	Jul 21, 2026	Jul 8, 2026
Redhat_linux	—	Upgrade golang-binUpgrade golang-docsNo solution existsUpgrade golang-testsUpgrade delve-debugsourceUpgrade golangUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-raceUpgrade golang-srcUpgrade delveUpgrade golang-misc	Sep 2, 2026	Jul 8, 2026
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Aug 13, 2026	Jul 8, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence