{
  "cveId": "CVE-2026-26014",
  "url": "https://patchblox.com/security/cve/CVE-2026-26014",
  "summary": "CVE-2026-26014 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-26014, released February 11, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "golang-github-pion-dtls-v3: Pion DTLS is a Go implementation of Datagram Transport Layer Security",
  "description": "Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a \u0022forbidden attack\u0022. Upgrade to v3.0.11, v3.1.1, or later.",
  "published": "2026-02-11T21:16:21Z",
  "severity": "medium",
  "cvss": 5.9,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.00687,
  "epssPercentile": 0.52912,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "golang-github-pion-dtls-v3",
      "release": "Debian 14",
      "fixedVersion": "3.1.2-1",
      "fix": "DEBIAN-CVE-2026-26014",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-26014",
      "released": "2026-02-11T21:16:21Z"
    },
    {
      "platform": "linux",
      "product": "govulncheck-vulndb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.0.20260226T182644-150000.1.149.1",
      "fix": "SUSE-SU-2026:0757-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0757-1",
      "released": "2026-03-03T11:34:04Z"
    },
    {
      "platform": "linux",
      "product": "govulncheck-vulndb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.0.20260723T184607-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21483-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21483-1",
      "released": "2026-07-30T09:09:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}