Vendor

refraction-networking

2 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2026-26994

uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. In versions 1.6.7 and below, uTLS did not implement the TLS 1.3 downgrade protection mechanism specified in RFC 8446 Section 4…

refraction-networking utls github.com/refraction-networking/utls golang-refraction-networking-utls Debian Ubuntu Go

Feb 20, 2026