{"id":"CVE-2026-120399","published":"2026-11-10T14:17:14.300","lastModified":"2026-11-10T14:17:14.417","description":"A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-1322"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-120399","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564888","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}