CVE-2026-108267: Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Oct

Released

2026-10-13

EPSS Score

0.12% (percentile: 1.6%)

Affected Products (5)

Other

• 18315-17084
• 21857-17084
• 21809-17084
• 19693-17084
• 21021-17084

Revision History

• 2026-10-13: Information published.