CVE-2026-108361Published
Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108361 · Microsoft / collected KEV context
cve-program · CVE-2026-108361
- https://github.com/Privasys/ra-tls-clients/security/advisories/GHSA-gg8q-mfhh-wrrc
- https://github.com/Privasys/ra-tls-clients/commit/076074873117ee5ff35a7c39e02952c28de3df0c
- https://github.com/Privasys/ra-tls-clients/commit/5ccfd778132e17cb54bb1a9c7b89d57fcfea59ec
- https://github.com/Privasys/ra-tls-clients/commit/b9114d772a636ad3307957dde4bb8afe70c9b40d
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.