CVE-2026-55663: Mediasoup Sctp Unauthenticated State Cookie

SCTP State Cookie is accepted without cryptographic HMAC authentication or creation timestamp verification.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-55663-mediasoup-sctp-unauthenticated-state-cookie --engine opengrep

Description

SCTP State Cookie is accepted without cryptographic HMAC authentication or creation timestamp verification.