freeradius-server

The FreeRADIUS server BuildStatusLink !Coverity statusCoverityStatusCoverityStatusLink !OSS-Fuzz statusOssFuzzOssFuzzLink Introduction The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4 DHCPv6, DNS, TACACS+ and VMPS...

CVE-2024-3596-Detector

RADIUS Vulnerability Detector Limits of the Code: The code is aimed directly at detecting MD5 conflict. However, a more comprehensive analysis may be required to thoroughly test all aspects of CVE-2024-3596. This code can only detect attacks based on MD5 collision. Additional analysis may be...

kanidm

Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...

CVE-2026-126312

The OpenBao software versions prior to 2.6.5 and 2.7.x (before 2.7.2 ) are vulnerable to an ACL bypass via non-canonical plugin paths. This flaw exists in the AppRole, Cert, LDAP, and RADIUS authentication methods, as well as in the openbao-plugins LDAP and RADIUS auth plugins before version 0.2....

EUVD-2026-125208

OpenBao before 2.6.5 and 2.7.x before 2.7.2, and the openbao-plugins LDAP and RADIUS auth plugins before 0.2.0, contain an ACL bypass in the AppRole, Cert, LDAP, and RADIUS auth methods caused by implicit path canonicalization. Authenticated attackers can request non-canonical paths for AppRole...

EUVD-2026-124907

Memory overflow in protocol load-balancing traffic handling Diameter, SIP-over-TCP, MQTT, RADIUS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

pfsense-auth-username-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-auth-username-xss pfsense-auth-username-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org head.inc logout title interpolates $SESSION'Username' raw. passwordmg FormStaticText is...

pfsense-l2tp-radius-mpd

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-l2tp-radius-mpd pfsense-l2tp-radius-mpd Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org vpn.inc interpolates "$radiussecret" quoted but unescaped. PPP client uses getmpdstr; servers...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

pfsense-ovpn-connect-eval

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ovpn-connect-eval pfsense-ovpn-connect-eval Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org openvpn.connectasync.sh eval "/sbin/pfctl -a '$anchorname' ..." with...

EUVD-2026-123860

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 throu...

CVE-2026-126232

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 throu...

CVE-2026-126232

An improper certificate validation vulnerability [CWE-295] exists in the RADIUS protocol of several Fortinet products, including FortiAnalyzer (versions 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.11, 7.2, and Cloud variants), FortiManager (versions 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.11, 7.2, and Cloud ...

CVE-2026-126232

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 throu...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...

CVE-2026-126232: Fortinet: A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0…

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 throu...

Fortinet FortiAnalyzer Improper certificate validation in RADIUS protocol (FG-IR-26-247)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-247 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Broken Access Control in Two-Factor-Authentication

An Improper Authentication vulnerability CWE-287 in the FortiOS Remote Radius Type Admin Two-Factor TFA Authentication may allow a remote authenticated attacker with at least read-only permission to log in to the FortiOS GUI with an invalid token after entering a valid username and password, in...

Fortinet FortiManager Improper certificate validation in RADIUS protocol (FG-IR-26-247)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-247 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...