34488 matches found
CVE-2026-108267
Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...
CVE-2026-108269
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...
CVE-2026-108267
The Privasys Go programming language fork, which provides RA-TLS support for crypto/tls , is vulnerable in versions prior to privasys-v0.5.1-go1.26.5 . In challenge-mode RA-TLS, certificates failed to bind quote ReportData to the active TLS session, binding it only to the certificate public key a...
CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
CVE-2026-75351
A flaw was found in OpENer. An out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser allows a remote attacker to trigger an application crash. By sending a specially crafted connection request, an attacker can exploit this flaw to cause a Denial of...
CVE-2026-105281
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...
CVE-2026-101022 Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF)
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
EUVD-2026-95781
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it...
CVE-2026-77411
RabbitMQ amqp091-go versions before 1.13.0 mishandle an oversized AMQP longstr field. A malicious or compromised broker can desynchronize message parsing, causing subsequent bytes to be interpreted as AMQP data and disrupting connection integrity or availability. Fixed in version 1.13.0. Mitigati...
Security Bulletin:Improper Handling of Exceptional Conditions in Erlang OTP erts (epmd)
Summary Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit wh...
curl: CVE-2026-107929: local interface connection reuse mixup
Summary: When CURLOPTINTERFACE is set with one of the documented prefixes if!, host!, ifhost!, that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address...
Linux Distros Unpatched Vulnerability : CVE-2026-107660
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tlsopen of libavformat/tlsmbedtls.c, which skips hostname...
CVE-2026-75349
The EIPStackGroup OpENer software, version v2.3.0/master (up to commit 76b95cf ), is vulnerable to an out-of-bounds read vulnerability during Connection Manager request parsing . This flaw allows a remote attacker to trigger a denial of service (DoS) . No specific exploitation details or remediat...
CVE-2026-75352
The OpENer v2.3/commit 76b95cf software is affected by an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending specially crafted network requests, which can cause the service to crash and result ...
EUVD-2026-95902
EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service...
PT-2026-108970
Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer versions 2.3.0 through commit 76b95cf Description An out-of-bounds read occurs during request parsing within the Connection Manager. This flaw allows a remote attacker to trigger a denial of service, which is a condition...
PT-2026-108907
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...
PT-2026-109325
Name of the Vulnerable Software and Affected Versions Privasys Go versions prior to 0.5.1-go1.26.5 Description In the challenge-mode RA-TLS Remote Attestation TLS implementation within crypto/tls, the software fails to bind the ReportData of the attestation quote to the active TLS session, bindin...
CVE-2026-75351: Out-of-bounds Read
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...