CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123609
MEDIUMCVSS 4NVD feed
Published 8 November 2026 · tracked since 8 November 2026
Description
Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client session values exposes secret key material. Custom ClientSessionStore implementations that log Tls12ClientSessionValue or Tls13ClientSessionValue can l
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog