Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is configured with a certificate accepting *.example.com, any XYZ.example.com where xyz is a valid name can be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-06 | 3 | Disclosure2General1 |
| 2026-05-09 | 1 | Disclosure1 |
🟠 Eclipse Vertx, Denial of Service (DoS) via Unbounded SNI Cache Growth, #CVE-2026-6860 (Medium) https://dailycve.com/eclipse-vertx-denial-of-service-dos-via-unbounded-sni-cache-growth-cve-2026-6860-medium/
Post summary
The post announces a new DoS vulnerability in Eclipse Vertx with technical details but provides no PoC, exploit, or patch information.
🚨*CVE* CVE-2026-6860 A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is conf… https://www.cve.org/CVERecord?id=CVE-2026-6860 ----- Traducción: CVE-2026-6860 Un … http://infoflow.cloud`
Post summary
CVE-2026-6860 discloses that a TLS client can send an SNI with a server name that matches a wildcard, potentially bypassing hostname validation during the handshake.
CVE-2026-6860 A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is conf… https://www.cve.org/CVERecord?id=CVE-2026-6860
Post summary
The text provides a brief technical description of a TLS handshake issue involving server name extensions and wildcard acceptance, but offers no evidence of exploitation, PoC, patch, or false‑positive claim.
CVE-2026-6860 TLS Server Name Extension Spoofing via Wildcard Certificate Matching https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6860
Post summary
The text announces CVE-2026-6860, identifying it as a TLS Server Name Extension spoofing vulnerability that exploits wildcard certificate matching; there is no mention of exploitation, patch, or PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | eclipse | vert.x | - | - | - |