EUVD-2026-121609

Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional Authenticated Data AAD update as a reset of all the AAD supplied so far, instead of leaving the AAD unchanged. An application that supplies its AAD in several fragments, one of which is empty, therefore produces or...

CVE-2026-88823

The OpenSSL AES-GCM-SIV implementation contains a flaw where a zero-length Additional Authenticated Data (AAD) update incorrectly resets all previously supplied AAD instead of leaving it unchanged. This occurs when applications supply AAD in fragments, leading to messages where the authentication...

AES-GCM-SIV AAD Forgery After Zero-length Incremental AAD Update

Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional Authenticated Data AAD update as a reset of all the AAD supplied so far, instead of leaving the AAD unchanged. An application that supplies its AAD in several fragments, one of which is empty, therefore produces or...

Azure-AccessPermissions

Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...

CVE-2025-40019-POC

proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...

azbelt

azbelt Standalone DLL and sliver extension for enumerating Azure related credentials, primarily on AAD joined machines Modules aadjoin - Gets info about machine AAD status via NetGetAadJoinInformation credman - Gets credentials from Credential Manager env - Looks for Azure/AAD specific...

TokenMan

Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.7.1) +295 more potentially affected by CVE-2026-116672 via authlib (>=1.0.0, <=1.8.0)

authlib PYPI version =1.0.0, =1.0.0, =0.4.0rc1, =0.1.0, =2.0.0, =2.0.0, =0.1.0, =0.5.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =0.9.5, =1.7.0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-116672 Source advisory: MEND:CVE-2026-116672...

EUVD-2026-108539

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-97785

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-97785

The AAD App Proxy is affected by an improper authentication vulnerability (CWE-287) that allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a CRITICAL base severity score of 10.0. While the documents confirm the impact of unauthorized privilege escalation,...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (>=1.0.0, <=1.0.3) +343 more potentially affected by CVE-2026-114614 via authlib (>=0.14.1, <=1.7.2)

authlib PYPI version =0.14.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =1.0.2, =0.4.0rc1, =0.1.0, =2.0.0, =2.0.0, =0.1.0, =0.5.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =1.3.0a20250924 and more Source cves: CVE-2026-114614 Source advisory: OSV:PYSEC-2026-4354...

AAD App Proxy Elevation of Privilege Vulnerability

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network...

PT-2026-121681

Name of the Vulnerable Software and Affected Versions AAD App Proxy affected versions not specified Description Improper authentication allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains ...

KLA91369 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain...

Ivanti EPMM Authentication Bypass (CVE-2023-35078)

Exploits CVE-2023-35078 in Ivanti Endpoint Manager Mobile EPMM: unauthenticated access to /mifs/aad/api/v2/admins/users allows reading admin accounts and creating a new local administrator. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPMM unauthenticated admin API access CVE-2023-35078.""...

Malicious code in hitale-irhr-aad (npm)

Source: amazon-inspector 82a207ac1b39e4629e45a699470fb9257c5344fd657a79d9cf4872741783745c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

SUSE CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...

CVE-2026-80832

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...