A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the server is configured with a certificate accepting *.example.com, any XYZ.example.com where xyz is a valid name can be used.
References
| Link | Resource |
|---|---|
| https://github.com/eclipse-vertx/vert.x/pull/6102 | Issue Tracking Patch |
| https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6 | Vendor Advisory Exploit |
| https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381 | Exploit Issue Tracking Third Party Advisory |
| https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381 | Exploit Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 May 2026, 13:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Eclipse
Eclipse vert.x |
|
| CPE | cpe:2.3:a:eclipse:vert.x:*:*:*:*:*:*:*:* | |
| References | () https://github.com/eclipse-vertx/vert.x/pull/6102 - Issue Tracking, Patch | |
| References | () https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6 - Vendor Advisory, Exploit | |
| References | () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381 - Exploit, Issue Tracking, Third Party Advisory | |
| CWE | CWE-770 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
12 May 2026, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-295 |
06 May 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381 - |
06 May 2026, 10:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 10:16
Updated : 2026-05-12 13:42
NVD link : CVE-2026-6860
Mitre link : CVE-2026-6860
CVE.ORG link : CVE-2026-6860
JSON object : View
Products Affected
eclipse
- vert.x