Skip to main content
Version: v1.2.x

CVE-2026-8286

CVE Details

Visit the official vulnerability details page for CVE-2026-8286 to learn more.

Initial Publication

07/03/2026

Last Update

07/07/2026

Third Party Dependency

curl-minimal

NIST CVE Summary

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

CVE Severity

8.1

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Analyzed

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.2.1⚠️ Impacted⚠️ Impacted
1.1.8⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.