Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-49457— QUIC has Broken TLS verification

Quick assessment

Affected
benoitc erlang_quic
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Benoit Chesneau erlang_quic是Benoit Chesneau个人开发者的一个基于Erlang的QUIC协议实现。 Benoit Chesneau erlang_quic 1.4.4之前版本存在加密问题漏洞，该漏洞源于TLS 1.3握手过程中未对服务器进行身份验证，未检查CertificateVerify签名、未验证证书链且未将主机名与证书比对，可能导致中间人攻击，破坏连接的机密性和完整性。

CVSS 9.1 · Critical EPSS 0.25% · P15

Affected Version Matrix 1

VendorProduct Version RangeStatus
benoitc erlang_quic < 1.4.4 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-49457

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
QUIC has Broken TLS verification
Source: CVE Program / CVE List V5
Vulnerability Description
erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificate, so `verify` was effectively a no-op on the client. A man-in-the-middle on the network path could present any certificate and impersonate any server, defeating the confidentiality and integrity of the connection. HTTP/3 uses the same client and was equally affected. Handshakes authenticated by a PSK (session resumption) are not affected, because the peer is authenticated by the PSK binder and no certificate is sent. This is fixed in 1.4.4. The client now verifies the CertificateVerify signature, validates the certificate chain against the trust store (`cacerts` option, the operating system store by default), and checks the hostname. Client `verify` now defaults to on; set `verify => false` to accept any certificate (for example a self-signed test server). No known workarounds are available before 1.4.4. `verify => true` had no effect, and inspecting the certificate after connecting does not help because without the signature check the peer is never proven to own the certificate it presents.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Benoit Chesneau erlang_quic 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Benoit Chesneau erlang_quic是Benoit Chesneau个人开发者的一个基于Erlang的QUIC协议实现。 Benoit Chesneau erlang_quic 1.4.4之前版本存在加密问题漏洞，该漏洞源于TLS 1.3握手过程中未对服务器进行身份验证，未检查CertificateVerify签名、未验证证书链且未将主机名与证书比对，可能导致中间人攻击，破坏连接的机密性和完整性。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
benoitc erlang_quic < 1.4.4 -

II. Public POCs for CVE-2026-49457

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 8332 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-49457

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-49457 (1)

IV. Related Vulnerabilities

Same vendor: benoitc
Same weakness: CWE-295

V. Comments for CVE-2026-49457

No comments yet

Leave a comment