{"metadata": {"vulnerability": "CVE-2026-55663", "count": 13, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-06-17T00:05:03.777Z", "date_only": false, "value": "2026-06-17T00:05:03.777Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55663", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-25T18:15:16.059Z", "date_only": false, "value": "2026-08-25T18:15:16.059Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55663", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-25T18:15:16.059Z", "date_only": false, "value": "2026-08-25T18:15:16.059Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55663", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-25T18:17:21Z", "date_only": false, "value": "2026-08-25T18:17:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P7X2-G5CQ-FHMQ", "record": "GHSA-P7X2-G5CQ-FHMQ", "field": "published"}, {"timestamp": "2026-08-25T18:17:21Z", "date_only": false, "value": "2026-08-25T18:17:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P7X2-G5CQ-FHMQ", "record": "GHSA-P7X2-G5CQ-FHMQ", "field": "modified"}, {"timestamp": "2026-08-25T18:55:43.763Z", "date_only": false, "value": "2026-08-25T18:55:43.763697Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55663", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-25T18:55:43.763Z", "date_only": false, "value": "2026-08-25T18:55:43.763697Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55663", "record": "FKIE_CVE-2026-55663", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-25T18:55:59.044Z", "date_only": false, "value": "2026-08-25T18:55:59.044Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55663", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-25T18:55:59.044Z", "date_only": false, "value": "2026-08-25T18:55:59.044Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55663", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-25T19:16:51.060Z", "date_only": false, "value": "2026-08-25T19:16:51.060", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55663", "record": "FKIE_CVE-2026-55663", "field": "published"}, {"timestamp": "2026-08-25T20:35:20.301Z", "date_only": false, "value": "2026-08-25T20:35:20.301736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/versatica/mediasoup/security/advisories/GHSA-p7x2-g5cq-fhmq", "record": "CVE-2026-55663", "field": "creation_timestamp", "uuid": "930ca09a-aa95-47ca-9f89-ab0c17eb6768", "url": "https://github.com/versatica/mediasoup/security/advisories/GHSA-p7x2-g5cq-fhmq"}, {"timestamp": "2026-08-26T08:09:19.895Z", "date_only": false, "value": "2026-08-26T08:09:19.895486Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/61d0254c7e615b862b27242bae8aadcf", "record": "CVE-2026-55663", "field": "creation_timestamp", "uuid": "4642ab2a-c0e0-49bc-a88b-80cbc890ccb2", "content": "# CVE-2026-55663: CVE-2026-55663: unauthenticated state cookie forgery in mediasoup SCTP stack\n\n> **CVSS Score:** 5.6\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55663\n\n## Summary\nA cryptographic validation flaw (CWE-345) exists in the built-in SCTP implementation of mediasoup (NPM package < 3.20.6, Rust crate < 0.22.5). Due to missing cryptographic signature verification of State Cookies, an on-path attacker targeting PlainTransport or PipeTransport without DTLS can forge state cookies containing static magic bytes. This allows the attacker to establish arbitrary SCTP associations and inject malicious DataChannel messages.\n\n## TL;DR\nUnauthenticated state cookie forgery in mediasoup allows on-path attackers targeting unencrypted PlainTransport/PipeTransport to establish fake SCTP connections and inject unauthorized DataChannel messages.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-345\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.6\n- **Impact**: Data Injection and Session Hijacking\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Listed**: No\n\n## Affected Systems\n\n- mediasoup (npm package)\n- mediasoup (Rust crate)\n- **mediasoup (npm package)**: >= 3.20.0, < 3.20.6 (Fixed in: `3.20.6`)\n- **mediasoup (Rust crate)**: >= 0.22.0, < 0.22.5 (Fixed in: `0.22.5`)\n\n## Mitigation\n\n- Upgrade to NPM version 3.20.6 or Rust crate 0.22.5\n- Enable DTLS encryption on PlainTransport and PipeTransport\n- Implement network-level access control to restrict UDP ports to trusted IPs\n- Use IPSec or secure VPN tunnels for cross-network media traffic\n\n**Remediation Steps:**\n1. Review your mediasoup deployment configuration for instances of PlainTransport and PipeTransport.\n2. Check if SCTP is enabled without DTLS encapsulation on these transports.\n3. Update your package.json dependency to 'mediasoup': '^3.20.6' or Cargo.toml dependency to 'mediasoup = \"0.22.5\"'.\n4. Deploy network firewalls to restrict the UDP media ports of PlainTransport to known trusted IP addresses only.\n\n## References\n\n- [GHSA-p7x2-g5cq-fhmq: mediasoup SCTP State Cookie Forgery](https://github.com/versatica/mediasoup/security/advisories/GHSA-p7x2-g5cq-fhmq)\n- [SCTP Cookie Cryptographic Verification Commit](https://github.com/versatica/mediasoup/commit/9c1a90a8f9206b965e727d134846fb42df4980a7)\n- [Pull Request #1829: Secure State Cookie Implementation](https://github.com/versatica/mediasoup/pull/1829)\n- [mediasoup v3.20.6 Release Notes](https://github.com/versatica/mediasoup/releases/tag/3.20.6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55663) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/61d0254c7e615b862b27242bae8aadcf"}, {"timestamp": "2026-09-09T21:07:31.353Z", "date_only": false, "value": "2026-09-09T21:07:31.353", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55663", "record": "FKIE_CVE-2026-55663", "field": "lastModified"}]}