CVE-2026-87119

Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holding a captured subscription activation credential to charge the payer repeatedly. The payer signs a Tempo KeyAuthorization over the chain id, key type, key id, expiry, limits and scopes only, with nothing tying it to th...

CVE-2026-87119

CVE-2026-87119 is an authentication bypass by capture-replay in ZenHive mpp (Elixir), affecting versions 0.14.0 through 0.16.1 . The root cause lies in MPP.Methods.Tempo.KeyAuthorization.verify/3: the payer signs a Tempo KeyAuthorization over the chain id, key type, key id, expiry, limits, and sc...

CVE-2022-29593

CVE-2022-29593 - 通过捕获重放绕过认证（鼎天 DT-R002） 标题 通过捕获重放绕过认证 发布时间：版本：1.0 厂商：深圳市鼎天科技有限公司 产品：2通道继电器板/继电器卡 受影响版本：固件 V3.1.276A 产品 - 鼎天 DTR004 阿里国际站链接 产品描述 2通道继电器板/继电器卡 支持 WiFi/RS485/以太网 技术规格 root@kitploit: 概述 支持多通道继电器，开/关/延时/点动 支持多种接口 RJ45/RS485/CAN/WIFI 本地按键控制 PC 应用配置和控制 WEB 配置和控制 8KB FIFO 命令缓冲区 支持密码 WIFI...

CVE-2022-43704

CVE-2022-43704 - 非端点可访问通道/通过捕获重放绕过认证 Sinilink XY-WFTX WiFi远程恒温器模块温度控制器 标题 产品文档 应用程序 用户手册 硬件 数据手册 ESP8285 降压转换器 固件 产品描述 root@kitploit: Overview WIFI Remote Thermostat High Precision Temperature Controller Module Cooling and Heating APP Temperature Collection XY-WFT1 WFTX Technical Parameters...

Astra Linux – Vulnerability in Tomcat9

Authentication Bypass due to a capture-replay vulnerability in Apache Tomcat’s DIGEST authenticator. If a client makes a DIGEST authenticated request with a nonceCount value exceeding the upper boundary of the replay window before windowSize requests have been made, that request can be replayed...

BIT-TOMCAT-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

CVE-2026-84003

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69676

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

EUVD-2026-73922

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-84003

Microsoft Authentication Library (MSAL) for Node.js is affected by an authentication bypass via capture-replay that allows an unauthorized network attacker to perform spoofing . The underlying cause is the ability to capture and replay authentication tokens, leading to high confidentiality and in...

EUVD-2026-73071

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

CVE-2026-69676

CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...

Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

Windows Kerberos Remote Code Execution Vulnerability

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

PT-2026-88147

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

PT-2026-87648

News: Windows Kerberos CVE-2026-69676 CVSS 8.8 lets a low-priv domain user replay a crafted auth request and run code on a DC; Exploitation More Likely; patch DCs now. https://t.co/eME8i0s2er...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-65905

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-13734 Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

CVE-2026-13734

Zephyr RTOS's WireGuard data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c validated the anti-replay counter only after committing several peer-state mutations (endpoint roaming update, liveness timers, and keypair rotation). Because the AEAD tag authenti...