GO-2026-4509
NoneCVSS
—
EPSS
—
Published
Feb 24, 2026
CISA due date
—
The record
Fingerprint vulnerability in uTLS from GREASE ECH mismatch for Chrome parrots in github.com/refraction-networking/utls
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/refraction-networking/utls | 1.6.0 | 1.8.1 |
Related vulnerabilities
- CVE-2026-27017 uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting… Same vulnerability
- CVE-2026-26994 uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting… Also affects github.com/refraction-networking/utls
- CVE-2026-26995 Rejected reason: Further research determined the issue is an external dependency… Also affects github.com/refraction-networking/utls