59123 matches found
CVE-2026-67693
A flaw in gnutls v.3.8.13 allows a remote attacker to obtain sensitive information by presenting a specially crafted end-entity X.509 certificate. The vulnerability stems from the software's failure to reject certificates containing contradictory Key Usage (KU) and Extended Key Usage (EKU) extens...
CVE-2026-107565: Improper Validation of Specified Quantity in Input
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-85422: Use of Hard-coded Credentials
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...
cjose security update
0.6.2.2-7.1 - Fix CVE-2026-53938: heap buffer overflow in AES key unwrap Resolves: RHEL-256962...
CVE-2026-106429: Integer Underflow (Wrap or Wraparound)
An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...
CVE-2026-87676: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...
CVE-2026-92861: Use of Hard-coded Credentials
The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...
WS-2026-0144
@payloadcms/plugin-mcp 3.64.0 through 3.87.1 and four 4.0.0-internal builds from May 2026: an operator-precedence bug in the default MCP API-key resolver made it ignore the key passed by a custom overrideAuth function and authenticate with the request's Authorization bearer header instead, so...
MiracleLinux 9 : rust-rpm-sequoia-1.10.2.1-1.el9_8 (AXSA:2026-1995:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1995:02 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Tenable has extracted the preceding description...
CVE-2026-101998: Not Failing Securely
Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...
AlmaLinux 10 : rust-sequoia-sq (ALSA-2026:76737)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:76737 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from...
Rocky Linux 10.2 [CIQ] Security Update: rpm-sequoia / rpm-sequoia-debuginfo / rpm-sequoia-devel / etc (crlsa-2026_76734)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676734 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Uninformative error messa...
Rocky Linux 9 [CIQ] Security Update: rpm-sequoia / rpm-sequoia-debuginfo / rpm-sequoia-devel / etc (crlsa-2026_76733)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676733 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Tenable has extracted the preceding description block...
Rocky Linux 10.2 [CIQ] Security Update: rust-sequoia-sq-debugsource / sequoia-sq / sequoia-sq-debuginfo (crlsa-2026_76737)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676737 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from...
Rocky Linux 10.2 [CIQ] Security Update: rust-sequoia-sqv-debugsource / sequoia-sqv / sequoia-sqv-debuginfo (crlsa-2026_76735)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676735 advisory. sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Tenable has extracted the preceding description block...
PT-2026-108006
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation...
PT-2026-108036
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0.3 Description The libssh-based sftp protocol handler lacks host key verification, which allows network attackers to impersonate SFTP servers. Attackers utilizing man-in-the-middle, DNS, or ARP spoofing can capture...
Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System
Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...
