CVE-2026-101973

A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment...

CVE-2026-96866

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

CVE-2026-96861

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

CVE-2026-69802

The Network Device Enrollment Service (NDES) is impacted by a weak authentication vulnerability (CWE-1390). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The vulnerability carries a HIGH base severity score of 8.1. While the documents confirm the imp...

CVE-2026-96861

An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. No specific software versions, root causes, or remediation details are provided in the documents. Expl...

CVE-2026-96866

An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The vulnerability is characterized by a CVSS 3.1 score of 7.5 (High) with a network attack vector and ...

CVE-2026-85323

Weak authentication in the Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 (Weak Authentication). No specific software versions, root causes, or exploit links are provided in the documents, bu...

OutOfTune

OutOfTune Inspired by the original Pytune, OutOfTune registers a rogue device in Entra ID, enrolls it into Intune MDM, and checks the resulting compliance state. Only supports Windows devices as this was my main goal, might add additional ones in the future. Accompanying blog:...

Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

PT-2026-112716

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...

EUVD-2026-97865

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST /api/otpenroll and POST /api/finishpasskeyregister are registered outside RequireSecureSession and accept a normal authenticated session without verifying the current password. An attacker with a stolen JWT can bind a...

Certi-Bhai

Certi-Bhai: AD CS Exploitation Toolkit Certi-Bhai is a comprehensive collection of PowerShell exploitation tools for attacking Active Directory Certificate Services AD CS vulnerabilities. This toolkit implements various Escalation Scenarios ESCs that demonstrate critical security misconfiguration...

CVE-2026-54121

👻 CVE-2026-54121 — CertiGhost Active Directory Certificate Services AD CS Privilege Escalation 👋 Overview CVE-2026-54121 "Certighost" is a high-severity privilege escalation vulnerability affecting Microsoft Active Directory Certificate Services AD CS. The vulnerability allows an authenticated...

virt-firmware

Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...

Certighost-CVE-2026-54121

Document Type: Detection Use Case Related CVE: CVE-2026-54121 Certighost Author: Youssef Benchater Detection Use Case: Certighost CVE-2026-54121 This document describes the Splunk detection built for CVE-2026-54121. It follows the standard detection use case format so it can sit in a detection...

CVE-2026-87109

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87109 Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

EUVD-2026-95492

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organizatio...

CVE-2026-87109

An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed via user-listing endpoints. This vulnerability occurs specifically while a member's enrollment remains unconfirmed, leading to the disclosure of secret authentication material to o...