PT-2026-110175

Name of the Vulnerable Software and Affected Versions UnicomAI Wanwu versions prior to 0.6.6 Description An authorization bypass allows authenticated users to mint AppKeys bound to MCP servers belonging to other users. By sending a request to the endpoint "/v1/appspace/app/key" and providing a...

compat-openssl11 security update

1:1.1.1k-5.6 - Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-265517 1:1.1.1k-5.5 - Fixes CVE-2026-63072: Heap buffer overflow in CMS key unwrapping Resolves: RHEL-246280...

CVE-2026-108856: Authorization Bypass Through User-Controlled Key

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the...

CVE-2026-107761: Insertion of Sensitive Information Into Sent Data

Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platfor...

HDKEM: Authentication Allocation for Deniable Hybrid Key Exchange

Deniable authenticated key exchange DAKE establishes a shared key without leaving transferable evidence that a party participated. We study DAKE protocols that authenticate each fresh session with one ring signature and show that their deniability mechanisms fall into three authentication...

PT-2026-110176

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api key because the router's Args struct lacks a redact attribute for it. Attackers with access to router logs, container output, or OTLP telemetry can recover the Bearer...

CVE-2026-108719: Server-Side Request Forgery (SSRF)

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...

Timing leaks of the nonce in ECDSA, EdDSA and DSA signatures

Helder Eijs reports Fix timing leaks of the nonce in ECDSA, EdDSA and DSA signatures The signing time depended on the secret nonce, enough to recover the private key with a lattice attack. - EC: scalars are encoded and processed on the full length of the order, and ecmixadd is constant time for t...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791734079)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791734079 advisory. - Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key...

PT-2026-110216

Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platfor...

CVE-2026-108677 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by...

CVE-2026-108677

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by...

CVE-2026-108677 JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by...

Frank Fiegel mcp-remote encryption vulnerability

Frank Fiegel’s mcp-remote software, versions 0.8.0 to 0.14.3, has encryption-related vulnerabilities. This issue arises from the fact that authorizeWithDeviceCode does not enforce the use of an HTTPS endpoint. When device authorization and token endpoints are non-loopback HTTP URLs, the client ke...

tbphp GPT-Load log information leakage vulnerability

Versions 1.4.11 and earlier of tbphp GPT-Load contain a log information leakage vulnerability. This flaw arises because the Gin Logger middleware records the original query string prior to extracting the AuthKey parameter. As a result, the client-side proxy key is stored in plaintext within conso...

RLSA-2026:79122 Important: cjose security update

CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 For more details about the security issues, including the impact, a CVSS score, acknowledgment...

cjose security update

An update is available for cjose. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list CJose is C library implementing the Javascript Object Signing and Encryption...

magento2-encryption-key-manager-cli

CLI per la Gestione della Chiave di Crittografia di Magento 2 Un'utilità per la rotazione e la gestione della chiave di crittografia di Magento 2. Le vittime di CVE-2024-34102 aka Cosmic Sting possono usarla come assistenza post-rimedio. Progettato per Uso in sviluppo Automazione del deployment...

mfcuk

README Compilazione: autoreconf -is ./configure make Esecuzione la più basilare: ./mfcuk -C -R 0:A -v 2 PACCHETTO MiFare Classic Universal toolKit MFCUK STRUMENTOI Mifare Classic DarkSide Key Recovery Tool mfcukkeyrecoverydarkside.c precedentemente noto come zvmfdarkside ... LICENZA GPL. Vedere...

SUSE CVE-2026-67693

An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...