EUVD-2026-68017

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

CVE-2026-55785 free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: OSV:GHSA-J769-9GV9-65GR...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19456649...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19456649...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: GHSA-J769-9GV9-65GR...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.3.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=6.2.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.2.0, =6.2.0, =6.2.0, =6.3.11 Source cves: CVE-2026-55867 Source advisory: MEND:CVE-2026-55867...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55867 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55867 Source advisory: MEND:CVE-2026-55867...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.2.1, <=1.2.2), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.0.1, <=3.1.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (3.0.2)

org.graylog2:graylog2-server MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.2.1, =3.0.1, =1.0.0, =1.2.0, =1.3...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=5.1.0, <=5.1.3), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=5.1.0, <=5.1.1) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.1.3)

org.graylog2:graylog2-server MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard =5.1.0, =5.1.0, =5.1.0, =5.1.2 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55841 Source advisory: GHSA-GQR6-R77P-C2PJ...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.3.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=6.0.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.11 Source cves: CVE-2026-55841 Source advisory: GHSA-GQR6-R77P-C2PJ...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55841 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19457545...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.1.0, <=4.3.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.2.3)

org.graylog2:graylog2-server MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.3.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=6.0.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.11 Source cves: CVE-2026-55841 Source advisory: SNYK:JAVA-ORGGRAYLOG2-19457545...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.2.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.1.2) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.1.13)

org.graylog2:graylog2-server MAVEN version 5.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.2.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.0.8)

org.graylog2:graylog2-server MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (5.2.1), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (5.1.3) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.1.9)

org.graylog2:graylog2-server MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 5.2.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.4.3)

org.graylog2:graylog2-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard 1.0.0 -...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.3.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.3.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=6.0.0, <=6.3.11)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.11 Source cves: CVE-2026-55841 Source advisory: OSV:GHSA-GQR6-R77P-C2PJ...