One-Sided-DIQKD Using Any Pure Bipartite Entangled State Secure against All Attacks

Quantum Key Distribution QKD allows spatially separated parties to establish a secret key among themselves based on quantum principles. While QKD systems are being deployed worldwide, their reliance on trusted measurements makes them vulnerable. Moreover, existing protocols have largely focussed ...

From Link Availability to Deadline-Constrained Key Service: A Feasibility Framework for Mobile Free-Space Quantum Key Distribution

Mobile free-space quantum key distribution QKD links can provide secret bits intermittently, whereas applications may need cryptographic key material at specified times. Optical feasibility, positive finite-key output, and deadline-compliant key service are consequently different claims. This...

PT-2026-122017

In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix add key race with keyring restriction key create or update snapshots keyring-restrict link before taking the destination keyring's semaphore. keyring restrict installs a restriction while holding that semaphore. This...

Linux Distros Unpatched Vulnerability : CVE-2026-114655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmongocrypt builds requests to external key management services AWS, Azure and GCP by inserting values from key vault documents, KMS provider configuration an...

PT-2026-122198

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cach...

PT-2026-122241

Name of the Vulnerable Software and Affected Versions Craft CMS affected versions not specified Description The app/process-api-response-headers action accepts fake API response headers from any authenticated control panel user. A non-admin user with accessCp permissions can perform a CRLF...

PT-2026-121814

LoadPublicKey resolved an EC key's curve with an unchecked type assertion, algToOptsMapalg.ECDSAOptions. A JWK declaring "kty":"EC" together with a non-EC "alg" — which RFC 7517 §4.4 permits — reaches that assertion and panics...

PT-2026-121812

jwkFields.CheckConsistency detected duplicate key ops entries with a pairwise nested loop, making validation cost grow with the square of the entry count. Because the check runs on every JWK and JWKS unmarshal, a modestly sized but hostile JWKS document could occupy a CPU core for many seconds...

FreeBSD : cjose -- Heap-based Buffer Overflow (35b3a492-b05a-11f1-9369-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35b3a492-b05a-11f1-9369-b42e991fc52e advisory. https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C...

Curl 7.69.1 < 8.23.0 SSH Known Hosts Validation Error

The version of curl installed on the remote host is 7.69.1 prior to 8.23.0. It is, therefore, affected by a host key validation vulnerability: - When libcurl uses libssh2 with a hashed knownhosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing...

PT-2026-122229

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an arbitrary ML-KEM-768 public key under any existing user's identity in any tenant's staff-crypto recipient directory. Th...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the sys/config/state/sanitized endpoint. An attacker can access sensitive cryptographic key material by querying this endpoint, which may allow unauthorized bindin...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-13505...

CVE-2026-115357

OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using these endpoints can complete root...

DEBIAN-CVE-2026-114655

libmongocrypt builds requests to external key management services AWS, Azure and GCP by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with...

CVE-2026-114655

libmongocrypt builds requests to external key management services AWS, Azure and GCP by inserting values from key vault documents, KMS provider configuration and KMS responses into request lines, headers and signed request bodies without validating or encoding them for each context. A user with...