TI-2026-76539 CVE-2026-112377 · GHSA-hqrh-qq2r-6h96Attestation relay in CCC attested-tls-poc allows impersonationPriority MEDIUM 41CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester.CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00218 · Published 2026-10-19 · No fix listed CWE-346