CVE-2026-48025

creationtimestamp| type| source ---|---|--- 2026-07-28 19:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq4kugu4f2j...

CVE-2026-48025

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at...