CVE-2026-120399— Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections

Quick assessment

Affected

Red Hat Red Hat Edge Manager 1

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 flightctl 中发现了一个漏洞。HTTP 服务器的连接上下文回调中会同步执行 TLS 握手，且未设置超时期限。网络可达的未认证客户端可通过挂起握手过程，阻止受影响的监听器接受新的连接。

CVSS 7.5 · High Updated Nov 10, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections

Source: CVE Program / CVE List V5

Vulnerability Description

A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

CWE-1322

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat Edge Manager 1	-	`cpe:/a:redhat:edge_manager:1`
Red Hat	Red Hat Edge Manager 1	-	`cpe:/a:redhat:edge_manager:1`
Red Hat	Red Hat Edge Manager 1	-	`cpe:/a:redhat:edge_manager:1`
Red Hat	Red Hat Edge Manager 1	-	`cpe:/a:redhat:edge_manager:1`

II. Public POCs for CVE-2026-120399

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-120399

请登录查看更多情报信息。

Other References for CVE-2026-120399 (2)

https://access.redhat.com/security/cve/CVE-2026-120399 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2564888 issue-tracking x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-120399

Same Patch Batch · Red Hat · 2026-11-10 · 11 CVEs total

CVE-2026-124747	7.5 HIGH	Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the report
CVE-2026-125712	7.5 HIGH	Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing
CVE-2026-125704	7.5 HIGH	Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization
CVE-2026-125652	6.8 MEDIUM	Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions
CVE-2026-125672	6.6 MEDIUM	Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis tok
CVE-2026-121885	6.5 MEDIUM	Podman: untrusted image labels allow auto-update to restart arbitrary systemd units
CVE-2026-125707	6.1 MEDIUM	Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table
CVE-2026-125706	5.5 MEDIUM	Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing
CVE-2026-125703	5.5 MEDIUM	Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling
CVE-2026-125709	4.2 MEDIUM	Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.

IV. Related Vulnerabilities

Same vendor: Red Hat

Same weakness: CWE-1322