2941 matches found
CVE-2026-102014 Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response...
EUVD-2026-101334
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response...
PT-2026-113855
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Description A stack-based buffer overflow occurs in the authd process. An attacker who can influence a configured RADIUS server can send a malicious RADIUS response to cause the authd...
CVE-2026-78632
The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...
CVE-2026-78633
The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests...
CVE-2026-78633 Denial of Service in Okta RADIUS Agent Packet Parser
The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests...
CVE-2026-78633
The Okta RADIUS Agent contains a Denial of Service vulnerability due to improper validation of the sub-attribute length during the parsing of a Vendor-Specific attribute . If a sub-attribute length of zero is provided, the parser enters an infinite loop , leading to worker-thread exhaustion . Thi...
CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer
The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...
CVE-2026-78632
The Okta RADIUS Agent Windows installer contains a vulnerability where it assigns improper write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals. This configuration affects the directories housing the agent configuration, logs, and the AES encryption key . Consequ...
CVE-2026-108108
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108
PHPNuxBill versions up to 2025.3.20 are vulnerable to an authentication bypass in RADIUS CHAP verification. The root cause is located in the Password::chap_verify() function, which incorrectly returns true even when the supplied response does not match the expected value. This allows an attacker ...
EUVD-2026-95809
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108 PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108107
PHPNuxBill versions through 2025.3.20 are vulnerable to an unauthenticated SQL injection in the radius.php FreeRADIUS REST endpoint. The root cause is the improper interpolation of request parameters into whereRaw() queries. Attackers can submit crafted username , macAddr , or nasid parameters du...
SUSE-SU-2026:24132-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation bsc1280914. - Fix incomplete RADIUS Message-Authenticator attribute validation in hostapd...
CVE-2026-108108: Improper Authentication
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
SUSE SLES15 Security Update : wpa_supplicant (SUSE-SU-2026:4587-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4587-1 advisory. This update for wpasupplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within...
PT-2026-108939
Name of the Vulnerable Software and Affected Versions PHPNuxBill versions prior to 2025.3.21 Description An authentication bypass exists in RADIUS CHAP verification. The issue occurs because the Password::chap verify function returns true even when the supplied response does not match. An attacke...
EUVD-2026-94669
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...