Pion makes DTLS 1.3 the default after a ten-month implementation
The library now does a one-round-trip handshake, post-quantum key exchange, Connection IDs, 0-RTT and Encrypted Client Hello.
Stories per day · 30 days
5 RSS
Relatedpost-quantum3ml-kem2openssl2denial-of-service1encrypted-client-hello1game-engine1godot1heap-overflow1ml-dsa1pion1tls1webrtc1
18 stories, newest first · one card per story
Stories tagged #dtls
Godot 3.2.2–4.7.2 remote crash via DTLS heap overflow
DTLS is opt-in; the flaw was runtime-confirmed on the official 4.7-stable Windows release template, with no fix named.
OpenSSL 4.1.0 adds DTLS 1.3 and post-quantum speedups
The October 23 feature release is not a security patch and documents four DTLS issues still awaiting a fix.
OpenSSL 4.1.0 adds DTLS 1.3 and ships four known DTLS bugs
Two bugs can misreport connection state, one can abort handshakes after packet loss, and KeyUpdate can drop a lost NewSessionTicket.
Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells
Attackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access and PHP web shells.
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Mass exploitation of NetScaler CVE-2026-88772 grants attackers root access to deploy WHIPSHOT web shells and SLAPSHOT tunneler against government and financial targets.
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
OpenSSL patches high-severity DTLS flaw CVE-2026-84782 (CVSS 8.2) that can leak unencrypted heap memory or crash DTLS connections.
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
Attackers exploit Citrix NetScaler zero-days and deploy WHIPSHOT and SLAPSHOT for persistent root access.
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL
OpenSSL and wolfSSL patched roughly 25 vulnerabilities, including an 8.2-rated DTLS heap data leak and certificate authentication bypasses affecting Nginx and HAProxy builds.
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
Actively exploited Citrix NetScaler CVE-2026-88772 is a critical DTLS overflow enabling pre-auth root code execution.
OpenSSL High-Severity Flaw Lets Attackers Leak Heap Memory in Plaintext
OpenSSL patched high-severity CVE-2026-84782, a DTLS out-of-bounds read that can leak heap memory or crash services.
OpenSSL Fixes High-Severity Bug That Can Leak Server Memory in Plaintext
OpenSSL patched CVE-2026-84782, a high-severity DTLS flaw that can leak heap memory or crash servers.
OpenSSL Security Advisory [29th September 2026]
OpenSSL rates DTLS handshake retransmission bug CVE-2026-84782 high severity.
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)
watchTowr dissects CVE-2026-88772, an in-the-wild-exploited pre-auth DTLS memory overflow in Citrix NetScaler enabling RCE, one of eight fixed flaws.
Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug
Citrix patched two actively exploited NetScaler zero-days (CVE-2026-88771/88772, CVSS 9.5); CISA added both to KEV amid global attacks.
rsyslog imdtls permitted-peer authorization bypass
rsyslog's imdtls module keeps DTLS sessions active when permitted-peer checks fail after a successful handshake.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability
Cisco patched a DTLS flaw in ASA and FTD software for Secure Firewall 3100/4200 series letting unauthenticated attackers trigger device reloads.
OpenSSL 4.1.0 Alpha1 Released With DTLS 1.3 and Faster Post-Quantum Cryptography
OpenSSL 4.1.0 Alpha1 adds DTLS 1.3 support, ML-DSA and ML-KEM post-quantum optimizations, and GREASE TLS compatibility, intended for testing only.
2