59100 matches found
Microsoft Windows: CVE-2026-69506: Windows Key Storage Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...
PT-2026-112944
Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a request comes from a...
PT-2026-111388
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
PT-2026-112857
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...
PT-2026-112856
Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network. This authentication-bypass flaw could expose keys, certificates, and secrets used acro...
PT-2026-111838
Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE DOWNLOAD SIGN SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to...
Microsoft Windows: CVE-2026-69640: Windows Key Distribution Center Security Feature Bypass Vulnerability
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network...
CVE-2026-72895: Use of Default Cryptographic Key
A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...
PT-2026-111832
Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for the cleartext key, or send a chosen apiUrl to...
CVE-2026-110214: Use of Hard-coded Cryptographic Key
Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILEDOWNLOADSIGNSECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to...
Microsoft Windows: CVE-2026-69650: Windows Key Distribution Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...
Quantum-Resilient Secure Protocol for Decentralized Edge-IoT Peer-To-Peer Energy Trading Systems
The rise of quantum computing presents substantial challenges to the security of Peer-to-Peer P2P energy trading systems. This paper introduces an innovative mutual authenticated session key agreement protocol aimed at protecting edge-IoT P2P energy trading communications in the quantum era. Each...
PT-2026-112609
Name of the Vulnerable Software and Affected Versions Windows Internet Key Exchange IKE Protocol affected versions not specified Description An out-of-bounds read occurs in the Internet Key Exchange IKE Protocol, which is a protocol used to set up a secure, authenticated communication channel. Th...
CVE-2026-85922: Weak Authentication
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-112951
Name of the Vulnerable Software and Affected Versions Windows Key Storage Provider affected versions not specified Description An out-of-bounds read occurs in the Windows Key Storage Provider, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the...
CVE-2026-110208: Missing Authorization
Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for the cleartext key, or send a chosen apiUrl to...
KLA91335 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...
CVE-2026-106172: Use of Hard-coded Cryptographic Key
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker...