CVE-2021-3618

score

<0.1

cvss

7.4

epss

2.0%

published

2022-03-23

kev added

—

first seen

2026-10-21

ALPACA is an application layer protocol content confusion attack exploiting TLS servers with multi-domain or wildcard certificates, letting a MiTM attacker redirect traffic and break TLS authentication, requiring network access and traffic interception.