Detections
Analytics
CVE-2026-120399
high
Description
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121145