CVE-2026-7776Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener may open a connection and delay or withhold the client certificate during the TLS handshake, causing worker connection handling to block. This may prevent legitimate worker connections from being accepted or routed. This vulnerability, CVE-2026-7776, is fixed in Boundary 0.21.3, 0.20.3, 0.19.5.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-05-04); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-04: 2Mentions · 2026-05-05: 1Technical Details · 2026-05-04: 2Technical Details · 2026-05-05: 105-0405-05
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-042
Disclosure1General1
2026-05-051
Disclosure1
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7776 Denial-of-Service in Boundary Workers During TLS Handshake Node Enrollment https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7776

    Post summary

    The post announces a DoS vulnerability (CVE‑2026‑7776) affecting Boundary Workers during TLS handshake node enrollment; no PoC, exploitation evidence, or patch information is provided.

    0000044
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-7776 Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attack… https://www.cve.org/CVERecord?id=CVE-2026-7776 ----- Traducción: CVE-2026-7776 Bou… http://infoflow.cloud`

    Post summary

    The snippet notes CVE-2026-7776 as a denial‑of‑service vulnerability in Boundary workers during TLS handshakes, but offers no evidence of exploitation, PoC, or patch availability.

    0000029
    75 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7776 Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attack… https://www.cve.org/CVERecord?id=CVE-2026-7776

    Post summary

    The text announces CVE‑2026‑7776, a denial‑of‑service flaw in Boundary during TLS handshakes, but provides no PoC, exploit, or patch details.

    00000227
    57.4K followersView on X

Explore more