ssh3

!NOTE SSH3 is probably going to change its name. It is still the SSH Connection Protocol RFC4254 running on top of HTTP/3 Extended connect, but the required changes are heavy and too distant from the philosophy of popular SSH implementations to be considered for integration. The specification dra...

CVE-2026-106805

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-106805

A resource exhaustion vulnerability exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. The root cause is that the SMF fails to properly release allocated UE IP address resources when a PFCP Session Establishment Response is not received from the UPF . This allows an atta...

CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

PT-2026-135533

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-106805

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

EUVD-2026-115346

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-65219

A flaw in the BMC RAKP+ implementation on Supermicro hardware allows an attacker to send a request followed by a specially crafted RAKP message. This vulnerability enables the attacker to establish an RMCP+ session , which can then be used to execute commands . The root cause is identified as an ...

CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

CVE-2026-110475 Improper Authentication Vulnerability in CreditNirvana Collections Platform

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

CVE-2026-110475

The CreditNirvana Collections Platform is vulnerable to an improper authentication and authorization flaw within its platform login service. An unauthenticated remote attacker can manipulate authentication requests to access APIs without a valid session. Successful exploitation allows the attacke...

PT-2026-123298

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a val...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from improper handling of response message consumption by the wireguard noise module after intermediate initialization; this results in a race condition that may lead to inconsistent handshake states or repeated session...

CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

The OpenText™ EnCase SAFE Agents component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activi...

CVE-2026-75120

The OpenText™ (EnCase SAFE Agents) component, used by products including OpenText™ Endpoint Investigator , Endpoint Forensics & Response , Information Assurance , and Endpoint Security , contains a security vulnerability. This flaw allows unauthorized or unauthenticated activity to establish an u...

CVE-2026-108103

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...

CVE-2026-108103: Out-of-bounds Read

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...

PT-2026-108929

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A heap out-of-bounds read occurs in the ogs pfcp parse dropped dl traffic threshold function. Remote unauthenticated attackers can read past Information Element IE buffers by sending short IEs. This ...

EUVD-2026-94217

This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...

CVE-2026-92370 Remote Session Access Control Bypass Leading to Remote Code Execution

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for...