Lucene search
+L

1816 matches found

OSV
OSV
•added 2026/02/03 3:15 a.m.•21 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

5.6CVSS5.8AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/03 3:15 a.m.•24 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS0.00156EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/03 2:28 a.m.•27 views

EUVD-2026-5286

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS5.5AI score0.00156EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/03 2:28 a.m.•13 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS5.5AI score0.00156EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/03 2:28 a.m.•48 views

CVE-2026-24935 An improper certificate validation vulnerability was found in a third-party NAT traversal module.

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/03 2:28 a.m.•40 views

CVE-2026-24935

CVE-2026-24935: A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server, enabling a MitM attacker to intercept or redirect the NAT tunnel establishment. This vulnerability could disrupt service availability or enable targeted attacks by ac...

6.3CVSS7.1AI score0.00156EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•9 views

CVE-2026-24935: Improper Certificate Validation

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS7.1AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/27 8:25 a.m.•45 views

CVE-2026-24797 An out of bounds write due to a missing bounds check in neka-nat/cupoch

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

6.9CVSS0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/27 8:25 a.m.•10 views

CVE-2026-24797 An out of bounds write due to a missing bounds check in neka-nat/cupoch

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

6.9CVSS5.8AI score0.00362EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/27 8:25 a.m.•20 views

EUVD-2026-4721

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

6.9CVSS5.8AI score0.00362EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/27 8:25 a.m.•46 views

CVE-2026-24797

CVE-2026-24797 describes an out-of-bounds write in the necka-nat/cupoch stack, specifically within third_party/libjpeg-turbo/libjpeg-turbo modules tied to program file tjbench.C. Affected component: cupoch (neka-nat integration). Root cause: missing bounds check leading to an out-of-bounds write....

6.9CVSS5.8AI score0.00362EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/27 8:25 a.m.•10 views

CVE-2026-24797

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

6.9CVSS5.8AI score0.00362EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/27 12:00 a.m.•29 views

PT-2026-4866

Out-of-bounds Write vulnerability in neka-nat cupoch third party/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

6.9CVSS5.8AI score0.00362EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•7 views

CVE-2026-24797: Out-of-bounds Write

Out-of-bounds Write vulnerability in neka-nat cupoch thirdparty/libjpeg-turbo/libjpeg-turbo modules. This vulnerability is associated with program files tjbench.C. This issue affects cupoch...

6.9CVSS5.8AI score0.00362EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/16 12:00 a.m.•10 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004189)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004189 advisory. In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error,...

7.8CVSS6.6AI score0.01092EPSS
SaveExploits3References14
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•11 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001915 advisory. The nfnatredirectipv4 function in net/netfilter/nfnatredirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service NULL pointer...

10CVSS6.7AI score0.09235EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2026/01/15 12:00 a.m.•13 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002256 advisory. The nfnatredirectipv4 function in net/netfilter/nfnatredirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service NULL pointer...

10CVSS6.7AI score0.09235EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•16 views

MiracleLinux 3 : ipsec-tools-0.6.5-13AXS3.1 (AXSA:2009-435:03)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-435:03 advisory. This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds:...

5CVSS5.8AI score0.11631EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•15 views

MiracleLinux 3 : ipsec-tools-0.6.5-8.2AXS3 (AXSA:2009-67:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-67:01 advisory. This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds: ...

5CVSS5.7AI score0.11631EPSS
SaveExploits3References3
Fedora
Fedora
•added 2026/01/13 12:49 a.m.•20 views

[SECURITY] Fedora 43 Update: coturn-4.7.0-4.fc43

The Coturn TURN Server is a VoIP media traffic NAT traversal server and gatew ay. It can be used as a general-purpose network traffic TURN server/gateway, too. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relaying...

7.7CVSS5.9AI score0.00412EPSS
SaveExploits0
Rows per page
Query Builder