OpenSSL GOST Cryptographic Signature Verification

The vulnerability related to the implementation of cryptographic algorithms per GOST for OpenSSL gost-engine stems from errors in verifying cryptographic signatures. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information...

SimpleOne ITSM Cryptographic Signature Bypass Authentication

The vulnerability in the SimpleOne ITSM automation system relates to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to bypass the authentication process...

parsec-cloud

.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...

CVE-2026-17301

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected by vulnerabilities that allow an unauthenticated attacker to bypass authentication . The root cause is the improper verification of a cryptographic signature (CWE-347). This flaw can lead to high impact...

EUVD-2026-118692

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature...

CVE-2026-17290

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to an authentication bypass vulnerability. The root cause is the improper verification of cryptographic signatures when processing identity information from a login provider. This allows a remote auth...

CVE-2026-105459

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to unauthorized access due to improper verification of a cryptographic signature (CWE-347). Specifically, the system accepts tokens without fully verifying their signatures, which could enable an atta...

EUVD-2026-118912

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an attacker to gain unauthorized access to an organization due to improper verification of a cryptographic signature. A token is accepted without its signature being fully verified, which could allow an attacker ...

CVE-2026-85248

A flaw was found in the Apache Camel Post-Quantum Cryptography PQC component. The component reuses a single cryptographic signature instance across concurrent message exchanges without proper thread synchronization. Under concurrent processing conditions, signature operations from different...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.13 Vulnerability Details CVEID:CVE-2026-17405 DESCRIPTION: IBM API Connect could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on...

CVE-2026-121970

Pay with Vipps and MobilePay for WooCommerce woo-vipps before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers to forge webhook requests when no local webhook secret is stored, because the...

EUVD-2026-116910

Pay with Vipps and MobilePay for WooCommerce woo-vipps before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers to forge webhook requests when no local webhook secret is stored, because the...

CVE-2026-121606

A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verifysign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification...

CVE-2026-121606

A vulnerability exists in the Firmware Signature Verification component of Qihoo 360 devices, specifically affecting models D621-2, D603-2, D600-2, D619, D606-6, and D706 up to version 6.4.9 . The root cause is located in the verify_sign function of the file fs2/bin/iscm, where manipulation of th...

PT-2026-136968

Pay with Vipps and MobilePay for WooCommerce woo-vipps before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers to forge webhook requests when no local webhook secret is stored, because the...

CVE-2026-121970: wphostingdev Pay with Vipps and MobilePay for WooCommerce: Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper cryptographic signature…

Pay with Vipps and MobilePay for WooCommerce woo-vipps before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers to forge webhook requests when no local webhook secret is stored, because the...

CVE-2026-91898

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of...

CVE-2026-91899

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

CVE-2026-91899

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 are vulnerable to an Improper Verification of Cryptographic Signature (CWE-347). A high privileged attacker with local access could exploit this flaw to achieve Elevation of Privilege and Arbitrary Code Execution . Remediation is av...

CVE-2026-91899

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...