CVE-2026-105794 | Microsoft MsQuic up to 2.4.19/2.5.10/2.6.0 OpenSSL/QuicTLS TLS backend certificate validation

October 6, 2026 Yanac

A vulnerability classified as problematic was found in Microsoft MsQuic up to 2.4.19/2.5.10/2.6.0. This impacts an unknown function of the component OpenSSL/QuicTLS TLS backend. Such manipulation leads to improper certificate validation.

This vulnerability is uniquely identified as CVE-2026-105794. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More