CVE-2026-43867

camel-pqc AWS Secrets Manager 密钥元数据不安全反序列化复现工具（CVE-2026-43867） 本项目演示了 Apache Camel 的 camel-pqc 组件中的一个 Java 反序列化漏洞 ，编号为 CVE-2026-43867 。AwsSecretsManagerKeyLifecycleManager.deserializeMetadata 从 AWS Secrets Manager 的密钥中读取持久化的后量子密钥元数据，其流程是对存储的值进行 Base64 解码，然后使用原始的 java.io.ObjectInputStream.readObje...

pqaudit

pqaudit コードベースをスキャンして、量子コンピュータに脆弱な暗号を検出します。Q-Day の前に移行が必要なものを明確に把握できます。 pqaudit は、RSA、ECDSA、Ed25519、ECDH、DH など、Shor のアルゴリズムで破られる暗号アルゴリズムの使用を検出します。また、すでに移行が完了した PQC の使用（ML-KEM、ML-DSA、SLH-DSA）も特定するため、移行の進捗を追跡できます。出力は、人間が読めるテキスト、JSON、CycloneDX CBOM、GitHub Code Scanning 向け SARIF、または自己完結型の HTML...

PQC-Scanner

El Escáner de Red PQC es una herramienta de evaluación diseñada específicamente para ayudar a las organizaciones a comprender su exposición criptográfica durante la transición hacia una postura de seguridad post-cuántica. A diferencia de los escáneres TLS tradicionales que se centran únicamente e...

CVE-2026-46590

CVE-2026-46590 — camel-pqc Key-Lifecycle Unsafe Deserialization Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-pqc 4.18.2 Camel Quarkus|...

CVE-2026-40048

camel-pqc FileBasedKeyLifecycleManager 不安全反序列化复现工具 CVE-2026-40048 该项目演示了 Apache Camel 的 camel-pqc 组件中的 Java 反序列化漏洞 ，追踪编号为 CVE-2026-40048 。FileBasedKeyLifecycleManager 从配置的密钥目录中读取 .key 文件，使用原始的 ObjectInputStream 且未设置 ObjectInputFilter，因此能够写入该目录的攻击者可实现 远程代码执行 。...

kroxylicious-pqc-filter

Kroxylicious PQC 记录加密过滤器 一款 Kroxylicious 过滤器插件，使用 ML-KEM （FIPS 203）密钥封装和 AES-256-GCM 对称加密，为 Apache Kafka 提供透明的 后量子密码学（PQC） 记录级加密。 Kafka 生产者和消费者零代码更改 。Kroxylicious 代理 拦截流量，并在 Produce 时自动加密、在 Fetch 时自动解密。 Producer ──plaintext── Kroxylicious ──encrypted── Kafka Broker Consumer ──plaintext──...

CVE-2026-81718

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

EUVD-2026-67068

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718

openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 key derivation, employing only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-f...

CVE-2026-81703

openssl_encrypt versions before 1.4.9 fail to validate the encryption status of embedded post-quantum private keys in file metadata. An attacker can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext wit...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

EUVD-2026-67059

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

java-17-openjdk security update

17.0.20.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.1.1-1.1 - Update to jdk-17.0.20.1+1 GA - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - This tarball is embargoed until 2026-08-18 @ 1p...

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

CVE-2026-74887

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

CVE-2026-74900 openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

CVE-2026-74887 openssl_encrypt before 1.4.0 Insecure Random Import in PQC Module

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

CVE-2026-74887 openssl_encrypt before 1.4.0 Insecure Random Import in PQC Module

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...