All 3 CVE vulnerabilities found in cocos, with AI-generated Chinese analysis, references, and POCs.
Vendor: ultravioletrs
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-92701 | Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path CWE-346 | 9.1 | Critical | 2026-09-18 |
| CVE-2026-92702 | Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path CWE-346 | 9.1 | Critical | 2026-09-18 |
| CVE-2026-33697 | CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys CWE-322 | 7.5 | High | 2026-03-26 |
All 3 known CVE vulnerabilities affecting cocos with full Chinese analysis, references, and POCs where available.