14714 matches found
CVE-2026-87424
A vulnerability exists in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 . The issue stems from the use of a hard-coded cryptographic key , which allows an attacker to bypass authentication across deployments. The vulnerability is addressed in ASCG version 3....
CVE-2026-85422
A vulnerability in Brocade ASCG version before 3.5.0 allows an attacker to obtain a static cryptographic key hardcoded into the software binaries. This key is used to secure sensitive data at rest and protect inter-node communication protocols. An attacker successfully extracting this key can dec...
CVE-2026-85422
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...
EUVD-2026-94787
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...
PT-2026-108207
Name of the Vulnerable Software and Affected Versions Tapo device firmware affected versions not specified Description Firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to the device can recover this sensitive material...
Rocky Linux 10.2 [CIQ] Security Update: rpm-sequoia / rpm-sequoia-debuginfo / rpm-sequoia-devel / etc (crlsa-2026_76734)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676734 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Uninformative error messa...
AlmaLinux 10 : rust-sequoia-sq (ALSA-2026:76737)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:76737 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from...
PT-2026-108015
šØ CVE-2026-14999 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures...
PT-2026-108004
Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...
PT-2026-107860
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key...
PT-2026-107853
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...
Rocky Linux 10.2 [CIQ] Security Update: rust-sequoia-sqv-debugsource / sequoia-sqv / sequoia-sqv-debuginfo (crlsa-2026_76735)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676735 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Tenable has extracted the preceding description block...
CVE-2026-107283 AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptographically secure random source. Digest...
CVE-2026-107283 AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptographically secure random source. Digest...
CVE-2026-34499
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10...
EUVD-2026-94578
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10...
CVE-2026-34499
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10...
CVE-2026-34499
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10...
CVE-2026-34499
The Johnson Controls ADVMS software version before 3.10 is affected by a use of hard-coded cryptographic key (CWE-321) vulnerability. This flaw allows an attacker to Read Sensitive Constants Within an Executable . The vulnerability has a CVSS 4.0 base score of 8.5 (High) , with a local attack vec...
RLSA-2026:76737 Important: rust-sequoia-sq security, bug fix, and enhancement update
Command-line frontends for Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from sequoia-sq rhel-10.2.z JIRA:Rocky Linux-177547 For more details about the security...