Skip to content
OpenAdvisories

Vendor

TrustTunnel

2 known vulnerabilities.

Products

TrustTunnel 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-24904

    TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello

    TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, `TlsListener::listen()` peeks 1024 bytes and calls `extract_client_random(...)`. If `parse_tls_plaintext` fails (for example, a fragmented/…

    TrustTunnel TrustTunnel