{"id":"CVE-2026-55360","kind":"vulnerability","aliases":["CVE-2026-55360"],"related":[],"title":"Secure transport handshake logic error lets attackers bypass channel encryption","description":"In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel encryption due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A logic error in the secure_transport.c handshake code can let traffic bypass secure transport channel encryption. The description says this could lead to local privilege escalation with no extra execution privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"secure_transport.c","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["other","secure-transport"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:13+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","triaged_at":"2026-11-10T20:53:58+00:00","updated_at":"2026-11-10T20:53:58+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:53:58Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Secure transport handshake logic error lets attackers bypass channel encryption","impact":"high","summary":"A logic error in the secure_transport.c handshake code can let traffic bypass secure transport channel encryption. The description says this could lead to local privilege escalation with no extra execution privileges and no user interaction.","audience":"businesses","category":"other","nicknames":[],"who_cares":["secure-transport"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"traffic bypasses encryption and local privileges escalate","analyst_note":"Identify the affected product and vendor for secure_transport.c, its fixed versions, and whether the handshake bypass is remotely reachable; the NVD entry alone gives no product or version data.","how_to_check":"unknown","plain_action":"","product_name":"secure_transport.c","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000649,"input_tokens":4534,"output_tokens":392,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-55360':13A,16A 'addit':93C 'attack':7A 'bypass':8A,35B,73C 'channel':9A,38B,76C 'code':31B 'could':44B,84C 'cve':11A,14A 'descript':41B 'due':78C 'encrypt':10A,39B,77C 'error':5A,25B,82C 'escal':49B,88C 'execut':53B,94C 'exploit':103C 'extra':52B 'handshak':3A,30B,63C 'interact':58B,98C 'lead':45B,85C 'let':6A,33B 'local':47B,87C 'logic':4A,24B,81C 'need':96C,101C 'possibl':70C 'privileg':48B,54B,90C,95C 'say':42B 'secur':1A,21B,28B,36B,60C,65C,74C 'secure':17A 'secure-transport':20B 'traffic':34B 'transport':2A,22B,37B,61C,75C 'transport.c':18A,29B,66C 'usecas':62C 'user':57B,97C 'way':71C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["securetransportc"],"ptokens":["secure","transport"],"labels":["other","securetransport","unknown","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-55360':13A,16A 'attack':7A 'bypass':8A 'channel':9A 'cve':11A,14A 'encrypt':10A 'error':5A 'handshak':3A 'let':6A 'logic':4A 'secur':1A 'secure':17A 'transport':2A 'transport.c':18A","search_b":"'bypass':35B 'channel':38B 'code':31B 'could':44B 'descript':41B 'encrypt':39B 'error':25B 'escal':49B 'execut':53B 'extra':52B 'handshak':30B 'interact':58B 'lead':45B 'let':33B 'local':47B 'logic':24B 'privileg':48B,54B 'say':42B 'secur':21B,28B,36B 'secure-transport':20B 'traffic':34B 'transport':22B,37B 'transport.c':29B 'user':57B","search_c":"'addit':93C 'bypass':73C 'channel':76C 'could':84C 'due':78C 'encrypt':77C 'error':82C 'escal':88C 'execut':94C 'exploit':103C 'handshak':63C 'interact':98C 'lead':85C 'local':87C 'logic':81C 'need':96C,101C 'possibl':70C 'privileg':90C,95C 'secur':60C,65C,74C 'transport':61C,75C 'transport.c':66C 'usecas':62C 'user':97C 'way':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:13+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-55360","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55360","severity":null,"published_at":"2026-11-10T20:19:13+00:00","modified_at":"2026-11-10T20:19:13+00:00","first_seen_at":"2026-11-10T20:46:06+00:00","fetched_at":"2026-11-10T20:46:06+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}