CVE-2026-94450
HighCVSS 7.5Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packets are affected.
Risk Assessment
An attacker could cause service unavailability, potentially disrupting applications using s2n-quic.
Recommendation
Upgrade s2n-quic to version 1.89.0 or later.
Other vulnerabilities in s2n-quic
Original NVD description (English source)
Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packets are affected. To remediate this issue, users should upgrade to version v1.89.0 or later.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS