Will any new CVE in 2026 be assigned to the Signal Protocol or libsignal?

About

Resolves YES if NVD lists at least one CVE with Published in 2026 referencing the Signal Protocol, libsignal, or Signal Foundation as vendorProject or in the description.

Resolution criteria

NVD search returns at least one CVE-2026-xxxxx mentioning "signal" in cpe-vendor or description fields, attributable to Signal/libsignal.

Source

NVD search; cve.org.

Ambiguity

AMBIGUOUS if the CVE refers to a different "Signal" product (e.g., generic signal-handling library).

Discussion

Loading comments…