CVE-2026-78632

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

CVE-2026-78632

The Okta RADIUS Agent Windows installer contains a vulnerability where it assigns improper write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals. This configuration affects the directories housing the agent configuration, logs, and the AES encryption key . Consequ...

EUVD-2026-100484

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

CVE-2026-88140

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-88132

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

CVE-2026-85922

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-85925

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...

CVE-2026-83843

Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-69650

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...

CVE-2026-69640

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network...

CVE-2026-69506

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-110214

Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILEDOWNLOADSIGNSECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to...

CVE-2026-110208

Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for the cleartext key, or send a chosen apiUrl to...

EUVD-2026-100335

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

CVE-2026-85922

A weak authentication vulnerability in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. This security control bypass has a CVSS v3.1 score of 7.4 and is categorized as HIGH severity. Microsoft has released updates to address this vulnerability; users ar...

EUVD-2026-100126

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-85925

The Azure Key Vault component is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released updates to address this issue; users are ...