Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of service on the host. No fixed version is available as of this review.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-54609 in Quiet-Terminal-Interactive QTINeon allows unauthenticated clients to cause denial of service through relay-to-host amplification. https://ift.tt/8XMslgD
Post summary
The post discloses a DoS vulnerability in Quiet-Terminal-Interactive QTINeon that permits unauthenticated client amplification, but it does not include a PoC, patch, or evidence of active exploitation.
CVE-2026-54609 in Quiet-Terminal-Interactive QTINeon allows unauthenticated clients to cause denial of service through relay-to-host amplification. https://ift.tt/8XMslgD
Post summary
A new vulnerability, CVE-2026-54609, has been disclosed affecting Quiet‑Terminal‑Interactive QTINeon, enabling unauthenticated denial of service by relay‑to‑host amplification; no active exploitation or patch details are yet reported.