CVE-2026-84784

Published 29 September 2026 · tracked since 30 September 2026

Description

Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use.Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. Th

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-95327 MEDIUM 6.5
• CVE-2026-95328 MEDIUM 6.5
• CVE-2026-95329 CRITICAL 9.6
• CVE-2026-95331 CRITICAL 9.6
• CVE-2026-95318 CRITICAL 9.6
• CVE-2026-95319 HIGH 8.3
• CVE-2026-95322 HIGH 8.3
• CVE-2026-95325 CRITICAL 9.6
• CVE-2026-95310 CRITICAL 9.6
• CVE-2026-95311 CRITICAL 9.6

→ Open the live CVE board · all tools