CVE-2026-115906 zip: AES Entry HMAC Authentication Bypass on Premature EOF

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC only when the attacker-controlled data counter reaches zero. If the underlying bounded reader reaches the real end of the archive while...

CVE-2026-115906

The zip library for Rust (versions 0.6.0 through 9.0.0 ) contains a vulnerability in the AES entry reader (src/aes.rs). The component fails to verify the HMAC authentication tag if the archive reaches the end of the stream while the data counter is still positive, or if an encrypted entry lacks a...

CVE-2026-115906 zip: AES Entry HMAC Authentication Bypass on Premature EOF

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC only when the attacker-controlled data counter reaches zero. If the underlying bounded reader reaches the real end of the archive while...

CVE-2026-115906 zip: AES Entry HMAC Authentication Bypass on Premature EOF

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC only when the attacker-controlled data counter reaches zero. If the underlying bounded reader reaches the real end of the archive while...

CVE-2026-116371 Akuvox Akubela HyPanel PS51 login improper authentication

A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor w...

CVE-2026-116371

A vulnerability exists in Akuvox Akubela HyPanel PS51 (version 51.130.40.26) involving improper authentication within an unknown function of the /login file. An attacker can remotely launch this attack by manipulating the engrmode argument with the input admin . No specific remediation or patch i...

CVE-2026-116371 Akuvox Akubela HyPanel PS51 login improper authentication

A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor w...

EUVD-2026-109982

A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor w...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

EUVD-2026-109919

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115678

Arm Keil MDK-Middleware versions 8.0.0-8.3.0 are susceptible to a pre-authentication out-of-bounds read vulnerability during SNMP processing . The issue is categorized under CWE-195 (Signed to Unsigned Conversion Error). While the vulnerability is accessible over the network without authenticatio...

CVE-2026-77061 Missing Authentication for Critical Function in boneIO

boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated remote attacker on the local network can retrieve system logs, firmware version, serial number, MQTT username, configuration file listings, and API documentation. This data aids reconnaissance and...

CVE-2026-77061

The boneIO Black platform is vulnerable to a missing authentication flaw (CWE-306) where several API endpoints are excluded from authentication requirements. An unauthenticated remote attacker on the local network can exploit this to retrieve sensitive information, including system logs , firmwar...

CVE-2026-77061 Missing Authentication for Critical Function in boneIO

boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated remote attacker on the local network can retrieve system logs, firmware version, serial number, MQTT username, configuration file listings, and API documentation. This data aids reconnaissance and...

CVE-2026-77053 Missing Authentication in Default Configuration in boneIO

boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network interfaces and exposes all endpoints without requiring credentials. An unauthenticated remote attacker can fully control the device, causing denial of service, modifying configuratio...

CVE-2026-77053 Missing Authentication in Default Configuration in boneIO

boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network interfaces and exposes all endpoints without requiring credentials. An unauthenticated remote attacker can fully control the device, causing denial of service, modifying configuratio...

CVE-2026-77053

The boneIO Black firmware is vulnerable to missing authentication, where the management web API listens on all network interfaces and exposes all endpoints without requiring credentials. An unauthenticated remote attacker can fully control the device, leading to denial of service , configuration ...

CVE-2026-59107

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices...