CLEANSTART-2026-GS23058 RSA and DSA public key parsers did not enforce size limits on key parameters

CVE-2026-39829 affects multiple packages. The RSA and DSA public key parsers did not enforce size limits on key parameters. See references for individual vulnerability details...

CLEANSTART-2026-HG42719 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate

CVE-2026-39835 affects multiple packages. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. See references for individual vulnerability details...

CLEANSTART-2026-DS75678 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the buildkitd package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-ET25167 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...

CVE-2025-22869 affects multiple packages. SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. See references for...

PT-2026-108895

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

A Robust Digital Receiver Architecture for Continuous-Variable Quantum Key Distribution

Continuous-variable quantum key distribution utilizes advanced digital signal processing techniques to mitigate channel impairments, driving the progress of high-performance quantum secure communications. Specifically, digital heterodyne receivers are commonly implemented using down-conversion...

PT-2026-117593

Summary The API-key cache in check apikey allows an attacker to authenticate with a forged API key as long as the legitimate key for the same key id has been used recently. On a cache hit, the API key secret is never verified, resulting in a complete authentication bypass during the cache lifetim...

PT-2026-109326

Name of the Vulnerable Software and Affected Versions Enclave OS Virtual versions prior to tdx-v0.2.43 Enclave OS Virtual versions prior to tdx-gpu-v0.6.27 Description The TDX/GPU RA-TLS certificate issuer places the certificate public-key hash and client nonce in the quote ReportData but fails t...

Oracle Linux 10 : cjose (ELSA-2026-79122)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-79122 advisory. 0.6.2.2-7.1 - Fix CVE-2026-53938: heap buffer overflow in AES key unwrap Resolves: RHEL-256962 Tenable has extracted the preceding description block directly...

AlmaLinux 10 : cjose (ALSA-2026:79122)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:79122 advisory. cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 Tenable has extracted the preceding description block...

RHEL 10 : cjose (RHSA-2026:79122)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79122 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: cjose: Heap buffer overflow in AES Key Wr...

CVE-2026-107848: Cross-Site Request Forgery (CSRF)

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUESTTOKEN only for POST requests, while the declarative GET guard runs only when an act parameter is present. Backend actions dispatched through the key parameter can therefore execute...

OpenSSH 7.7 Username Enumeration

OpenSSH version 7.7 is susceptible to username enumeration through differing handling of malformed public-key authentication requests. The supplied material provides an isolated vulnerable Docker lab and reproduction details...

mod_auth_openidc:2.3 security update

cjose 0.6.1-5 - CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap Resolves: RHEL-256961 modauthopenidc 2.4.9.4-9 - Resolves: RHEL-248080 CVE-2026-54789 Denial of Service via malformed state cookie parsing...

PT-2026-108798

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An authorization bypass exists due to a user-controlled key. A low privileged attacker with remote access can exploit this issue to achieve elevation of...

PT-2026-109306

Name of the Vulnerable Software and Affected Versions Contao versions 4.0.0 through 5.3.49 Contao versions 5.7.0 through 5.7.11 Description Cross-Site Request Forgery CSRF occurs because the RequestTokenListener function validates the REQUEST TOKEN only for POST requests. While a declarative GET...

PT-2026-109318

Name of the Vulnerable Software and Affected Versions Wizarr versions prior to 2026.9.1 Description Markdown content provided through the editor or imported bundles is evaluated in a non-sandboxed Jinja2 environment with application globals exposed. This allows an authenticated user with...

PT-2026-108801

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An authorization bypass through a user-controlled key exists, allowing a low privileged attacker with remote access to potentially elevate their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-107675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersona...

CVE-2026-107785: Unexpected Status Code or Return Value

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...