Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are
    vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange
    message. This issue has been fixed in version 3.1.4. (CVE-2026-54908)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are     vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange     message. This issue has been fixed in version 3.1.4. (CVE-2026-54908)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
457446	Echo: github.com/pion/dtls/v3: security update to 3.1.4	Tenable Cloud Security	Echo Local Security Checks	Local	medium
457446	Echo: github.com/pion/dtls/v3: security update to 3.1.4	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
445521	SCA: security update for github.com/pion/dtls/v3 (GHSA-wg4g-wm44-ch5j)	Tenable Cloud Security	SCA Checks	Local	medium
445521	SCA: security update for github.com/pion/dtls/v3 (GHSA-wg4g-wm44-ch5j)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
324902	Linux Distros Unpatched Vulnerability : CVE-2026-54908	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-54908

medium

Tenable Plugins

medium

medium

medium

medium

medium