tocsin

CVE-2026-54609

4 advisories.

PyPI/qti-neon CVE-2026-54609: high 8.6, EPSS 0.46%

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54609 · published · modified · JSON

npm/qti-neon CVE-2026-54609: high 8.6, EPSS 0.46%

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54609 · published · modified · JSON

PyPI/qti-neon CVE-2026-54609: high 8.6, EPSS 0.46%

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54609 · published · modified · JSON

Maven/com.quietterminal:qti-neon CVE-2026-54609: high 8.6

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

CVE-2026-54609 · published · modified · JSON