CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

EUVD-2026-105129

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

CVE-2026-93475

The NetX Secure X.509 parser is vulnerable to an out-of-bounds write because it accepts RSA public keys of any size but decrypts them into fixed-size buffers sized for a default of 4096 bits. An attacker can provide a certificate with a larger modulus, causing the write to occur past a file-scope...

CVE-2026-93475

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the "NXCRYPTOMAXRSAMODULUSSIZE" default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-sco...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery SSRF Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a...

CVE-2026-65379

A vulnerability in macOS allows an application to potentially access sensitive user data due to issues with the handling of secure input state . This flaw is addressed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No specific exploit details or information on in-the-wild e...

CVE-2026-65379

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

PT-2026-119168

Vulnerability in Oracle Secure Backup component: NDMP daemon. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. Successful attacks of this vulnerabili...

PT-2026-117945

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

PT-2026-120143

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks...

PT-2026-118433

A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer underflow and a subsequent heap out-of-bounds read in any peer that processes a remote Certificate message. It is reachable pre-authentication, during the...

PT-2026-118435

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NX CRYPTO MAX RSA MODULUS SIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a...

PT-2026-119171

Vulnerability in Oracle Secure Backup component: Device Management and Support. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise...

PT-2026-119167

Vulnerability in Oracle Secure Backup component: Backup and Restore. Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Secure Backup. While the vulnerability is in...

PT-2026-119172

Name of the Vulnerable Software and Affected Versions Oracle Secure Backup versions 19.1.0.0.0 through 19.1.0.1.0 Description An issue exists in the Backup and Restore component that allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation c...

Fedora 43 : curl (2026-d65da12723)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d65da12723 advisory. - fix incomplete mTLS config matching in conn reuse CVE-2026-8932 - fix OpenLDAP SASL authentication bypass CVE-2026-13608 - fix OpenSSL pinning...

Observable-Level Framework for Finite-Key Security in Coherent-One-Way Quantum Key Distribution

Practical security analysis of Coherent-One-Way COW quantum key distribution requires optical-device modeling, finite experimental statistics, and security inference to be treated consistently without conflating assumptions. We present a modular observable-level simulation framework organized...

PT-2026-118434

The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero-length Certificate message therefore wraps the unsigned length to 0xFFFFFFFF, which makes the bounds check that follows...