CVE-2026-63073 Untrusted Sender DN Used as Format String in CMP Response Validation

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

Security update for sssd

This update for sssd fixes the following issue: CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed bsc1273925. Patch Instructions: To install this SUSE update use the SUSE recommended...

BIT-KEYCLOAK-2026-15572 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation

A flaw was found in Keycloak's Dynamic Client Registration DCR security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mappers a client can use, fails to re-validate the mapper type during a client update if the mapper's configuration remains...

Privilege Escalation

Keycloak is vulnerable to Improper Authorization. The vulnerability is due to the Dynamic Client Registration policy failing to re-validate protocol mapper types during client updates, allowing an attacker with client registration privileges to replace an allowed mapper with a restricted...

SUSE CVE-2026-75143

FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader libavformat/librist.c. libristread ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination...

SeriCrypt: An LLM-Driven Context-Aware Serialization Framework for Cryptographic Protocols

Constructing syntactically correct and cryptographically valid message sequences is essential for protocol state machine learning, conformance testing, and fuzzing. Unlike plaintext protocols, cryptographic protocols involve complex cross-message state dependencies and cryptographic computation...

OpenSSL Toolkit 3.6.4

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.6 release...

BGPay: An Incentive-Compatible Mechanism for BGP Hijack Filtering

BGP hijacking remains a persistent threat as existing defenses, including RPKI/ROV suffer from a fundamental incentive misalignment: the networks best positioned to filter malicious announcements bear operational costs but receive no direct benefit, while the victim prefix owner captures all the...

CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

CVE-2026-63074: Allocation of Resources Without Limits or Throttling

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

PT-2026-81524

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the QUIC protocol, which is a transport layer network protocol designed to reduce connection latency. A remote attacker can leak sensitive information by...

Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS : Linux kernel (IBM) vulnerabilities (USN-8658-2)

The remote Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8658-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...

OpenSSL -- Multiple vulnerabilities

The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...

Wazuh Server 3.9.0 < 4.14.5 DoS (CVE-2026-44253)

The version of Wazuh Server on the remote host is at least 3.9.0 and prior to 4.14.5. It is, therefore, affected by a denial of service vulnerability: - The cluster protocol allows an authenticated cluster node to exhaust memory on the master. The receivestr method accepts an attacker-controlled...

Linux Bluetooth Data Compromise

The vulnerability of the Linux operating system’s Bluetooth kernel implementation is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

CMS Protocol Analyzer DoS

The vulnerability of the CMS protocol analyzer, which is also used for analyzing computer network traffic with Wireshark, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...

Wireshark ESS DoS

The vulnerability of the ESS protocol analyzer used by Wireshark for analyzing computer network traffic is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SMC Protocol Kernel Buffer Overflow DoS

The vulnerability of the smcrxpipebufrelease function in the net/smc/smcrx.c module of the SMC protocol family implementation in the Linux operating system’s kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux IPv4 esp4.c esp_output_done Heap Buffer Overflow DoS

The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CMS Protocol Analyzer DoS

The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...