CVE-2026-94200: TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Oct

Released

2026-10-16

EPSS Score

0.47% (percentile: 39.1%)

Affected Products (1)

Other

• 21841-17084

Revision History

• 2026-10-16: Information published.