78 matches found
Updated kronosnet package fixes security vulnerabilities
Encryption key exposure in memory after cryptographic configuration changes. CVE-2026-15811 Access control list bypass via link id spoofing on unencrypted dynamic links. CVE-2026-15812 Memory corruption and out-of-bounds access via malformed network packet defragmentation. CVE-2026-15813...
MGASA-2026-0546 Updated kronosnet package fixes security vulnerabilities
Encryption key exposure in memory after cryptographic configuration changes. CVE-2026-15811 Access control list bypass via link id spoofing on unencrypted dynamic links. CVE-2026-15812 Memory corruption and out-of-bounds access via malformed network packet defragmentation. CVE-2026-15813...
EUVD-2026-107633
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on...
CVE-2026-100420
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on...
CVE-2026-100420 Information disclosure vulnerability in the cloud-client daemon of Deco BE63
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on...
CVE-2026-100420
A sensitive information disclosure vulnerability exists in the cloud-client daemon of the Deco BE63 . This flaw allows authenticated attackers to retrieve the plaintext TP-Link ID account password . Successful exploitation could lead to the compromise of the associated cloud account, enabling att...
TP-Link Deco BE63 information disclosure vulnerability
Versions of TP-Link Deco BE63 prior to 1.3.3 Build 26071612 contain an information disclosure vulnerability. This vulnerability stems from sensitive information leakage in the cloud-client daemon, potentially allowing authenticated attackers to obtain plaintext TP-Link ID account passwords. It ma...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: nl80211: Fix for “NL80211ATTRMLOLINKID off-by-one” issue. Since the validation of the netlink attribute range includes inclusive checking, the maximum value of the attribute NL80211ATTRMLOLINKID should be...
EUVD-2026-92710
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...
PT-2026-106213
Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the delete-share-link RPC where the system verifies only if the caller has permission to edit the parent file, failing to confirm if the caller created the share link or possesses...
OESA-2026-3280 kronosnet security update
The kronosnet source Security Fixes: A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw...
DEBIAN-CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812: Authentication Bypass by Spoofing
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
PT-2026-61829
Name of the Vulnerable Software and Affected Versions kronosnet versions prior to 1.35 Description An issue exists in the internal Access Control List ACL subsystem. When the framework is configured to manage dynamic links to accept network traffic from any IP address without network payload...
CVE-2026-32807
dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...
Linux Distros Unpatched Vulnerability : CVE-2026-64030
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is...
CVE-2026-64030
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is 0x000f, so linkid extracted from a PRIOACCESS ML element PERSTAPROFILE subelement can be 0..15. sdata-link has IEEE80211MLDMAXNUMLINKS 15...
CVE-2026-64030
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is 0x000f, so linkid extracted from a PRIOACCESS ML element PERSTAPROFILE subelement can be 0..15. sdata-link has IEEE80211MLDMAXNUMLINKS 15...
CVE-2026-64030 wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlepcs IEEE80211MLESTAEPCSCONTROLLINKID is 0x000f, so linkid extracted from a PRIOACCESS ML element PERSTAPROFILE subelement can be 0..15. sdata-link has IEEE80211MLDMAXNUMLINKS 15...