SUSE-SU-2026:3103-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. - CVE-2026-58374: missing...

booklab (>=0.7.0, <=0.10.0a68), criscostack (1.0.0) +5 more potentially affected by CVE-2026-49452 via weasyprint (59.0.0)

weasyprint PYPI version 59.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - booklab =0.7.0, =1.0.0, =1.1.0, =0.1.3, =21.5.0, =21.7.0 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +26 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (17.0.0)

org.keycloak:keycloak-services MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +24 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (17.0.1)

org.keycloak:keycloak-services MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.2.6), com.github.vzakharchenko:cisco-radius-plugin (1.2.6) +18 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (11.0.0)

org.keycloak:keycloak-services MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.2.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.11), com.github.vzakharchenko:cisco-radius-plugin (1.3.11) +25 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (15.0.1)

org.keycloak:keycloak-services MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.11 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (15.1.0)

org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +23 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (14.0.0)

org.keycloak:keycloak-services MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.16), com.github.vzakharchenko:cisco-radius-plugin (1.3.16) +24 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (16.0.0)

org.keycloak:keycloak-services MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.16 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.11), com.github.vzakharchenko:cisco-radius-plugin (1.4.11) +22 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (21.0.0)

org.keycloak:keycloak-services MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.11 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +21 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (12.0.0)

org.keycloak:keycloak-services MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.1, <=1.3.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.1, <=1.3.2) +21 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (12.0.1)

org.keycloak:keycloak-services MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =1.3.1,...

com.github.vzakharchenko:keycloak-plugins (>=1.1.0, <=1.2.0), com.github.vzakharchenko:mikrotik-radius-plugin (>=1.1.0, <=1.2.0) +12 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (9.0.0)

org.keycloak:keycloak-services MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 -...

com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +15 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (8.0.1)

org.keycloak:keycloak-services MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins =0.1, =0.1, =0.1, =0.1, =2.0.4, =2.0.4, =2.0.5 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +13 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (9.0.2)

org.keycloak:keycloak-services MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

CVE-2026-46560

Description An Improper Verification of Cryptographic Signature CWE-347 issue in OpenAM's RADIUS authentication module allows an unauthenticated network attacker to spoof an Access-Accept response and obtain an OpenAM session for any RADIUS username, without knowing the configured shared secret...

GO-2026-5373 Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs) in github.com/radius-project/radius

Radius Controller May Delete a Container Resource via an Injected Deployment Annotation Multi-Tenant Installs in github.com/radius-project/radius...

GHSA-386J-6M86-78F9 OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing

Summary Description An Improper Verification of Cryptographic Signature CWE-347 issue in OpenAM's RADIUS authentication module allows an unauthenticated network attacker to spoof an Access-Accept response and obtain an OpenAM session for any RADIUS username, without knowing the configured shared...

OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing

Summary Description An Improper Verification of Cryptographic Signature CWE-347 issue in OpenAM's RADIUS authentication module allows an unauthenticated network attacker to spoof an Access-Accept response and obtain an OpenAM session for any RADIUS username, without knowing the configured shared...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the RADIUS authentication process. An attacker can gain unauthorized access by sending a spoofed Access-Accept response to the client, which fails to verify the response authenticator,...