CVE-2026-73064
LOW
NVD
CVSS Score
2.9
Severity
LOW
Published
Sep 24, 2026
Vendor
unknown
Description
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.