CVE-2026-89422: TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Sep

Released

2026-09-24

EPSS Score

0.37% (percentile: 30.7%)

Affected Products (1)

Other

• 21841-17084

Revision History

• 2026-09-24: Information published.