2364 matches found
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
CVE-2026-73064
The Mbed TLS library (versions 3.2.0 through 3.6.6 and 4.0.0 through 4.1.0 ) is vulnerable to a flaw where a failure in the entropy source allows an attacker to remove or inject bytes into the start of a TLS stream. This issue specifically impacts TLS 1.3 servers . The root cause is linked to a r...
EUVD-2026-85930
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
CVE-2026-73064
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
CVE-2026-73064: Unexpected Status Code or Return Value
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...
PT-2026-97853
Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.2.0 through 3.6.6 Mbed TLS versions 4.0.0 through 4.1.0 Description An issue exists in TLS 1.3 servers where an attacker capable of causing an entropy source to fail can remove or inject bytes into the beginning of the TLS...
CVE-2026-13639
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-13639
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-13639
Synology DiskStation Manager (DSM) before versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075 is affected by an insufficient entropy vulnerability in its login logic . A remote, unauthenticated attacker can leverage this flaw to read or write arbitrary files and conduct denial-of...
EUVD-2026-82774
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-13639
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-13639: Insufficient Entropy
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
ROS-20260918-73-0127
The vulnerability of the Linux operating system’s kernel is related to insufficient entropy. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
CVE-2026-92912: Use of Insufficiently Random Values
AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid values for RTMP publish keys in LiveTransmition, reducing key entropy to approximately one million possibilities per creation second. Attackers who know the channel creation time can brute-force the...
CVE-2026-66372
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...
CVE-2026-66372 Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...
CVE-2026-66372
CVE-2026-66372 affects the Digital Watchdog VMAX DVR and NVR product lineups. The root cause is a predictable seed in the pseudo-random number generator (PRNG) , resulting in insufficiently random values that make web session tokens predictable and bound their entropy to the seed space. The CVSS ...