CVE-2026-123613
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Nov 08, 2026
Vendor
unknown
Description
Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record, because Deframer::aligned does not enforce RFC 8446 record-boundary alignment. A peer or on-path attacker can pack a plaintext EncryptedExtensions with the ServerHello, which rustls accepts unencrypted.