16621 matches found
CVE-2026-20609
creationtimestamp| type| source ---|---|--- 2026-02-12 05:23:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116055984470118971...
Microsoft Exchange InterceptorSmtpAgent Reliance on Untrusted Inputs Security Feature Bypass Vulnerability
This vulnerability allows remote attackers to bypass a security feature on affected installations of Microsoft Exchange. Authentication is not required to exploit this vulnerability. The specific flaw exists within the InterceptorSmtpAgent class. The issue results from the improper handling of SM...
CVE-2026-2314
creationtimestamp| type| source ---|---|--- 2026-02-11 21:44:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116054179553558484 2026-02-12 07:18:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menhag7tkd25 2026-02-12 14:10:29+00:00| seen|...
CVE-2026-2313
creationtimestamp| type| source ---|---|--- 2026-02-11 21:31:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116054128468472357 2026-02-12 07:18:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menha7ctx22g 2026-02-12 14:10:29+00:00| seen|...
CVE-2026-21527
User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-0228
creationtimestamp| type| source ---|---|--- 2026-02-11 17:56:24+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116053283364003733 2026-02-11 19:03:20+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mem65c2d6v22 2026-02-11 19:17:01+00:00| seen|...
CVE-2026-0229
creationtimestamp| type| source ---|---|--- 2026-02-11 17:56:24+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116053283364003733 2026-02-11 19:03:22+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mem65dd7pc2k 2026-02-11 19:17:01+00:00| seen|...
CVE-2026-26007
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the...
ALPINE-CVE-2026-26007
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the...
DEBIAN-CVE-2026-26007
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the...
CVE-2026-26007
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the...
CVE-2026-26007
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the...
CVE-2026-26007 cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the...
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Vulnerability Summary The publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an...
GHSA-R6PH-V2QM-Q3C2 cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Vulnerability Summary The publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey and loadpempublickey functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an...
Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review
Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for February 2026 This month's release...
Vulnerability fixed in Microsoft Exchange
Microsoft has fixed a vulnerability in Exchange server. A malicious person could, without prior authentication, impersonate another user and thus gain access to sensitive data in the victim's context. Microsoft has made updates available that fix the described vulnerability. We recommend that you...
CVE-2026-21527
User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
