CVE-2026-105163

A flaw was found in crossplane-runtime. A malicious container registry can bypass package signature verification when packages are installed using tag references instead of fixed content digests. Because the package manager resolves the image tag separately during verification and retrieval, an...

MikroTik RouterOS Improper Verification of Cryptographic Signature (CVE-2026-67276)

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

CVE-2026-77805: Improper Verification of Cryptographic Signature

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...

CVE-2026-105161

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

CVE-2026-105161

A flaw exists in invariant-systems-ai aiir versions up to 1.7.0 within the Policy Gate Handler component. This vulnerability allows for improper verification of cryptographic signatures through an unknown function, which can be triggered via a remote manipulation. The impact includes potential in...

CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

CVE-2026-105161

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

EUVD-2026-92118

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

PT-2026-104644

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

CVE-2026-105161: Improper Verification of Cryptographic Signature

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature through OpenPGPCertificate.getApplyingSubpacket in org.bouncycastle.openpgp.api. An attacker can make a genuine signature from a victim’s signing subkey validate under an...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature through OpenPGPCertificate.getApplyingSubpacket in org.bouncycastle.openpgp.api. An attacker can make a genuine signature from a victim’s signing subkey validate under an...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature through OpenPGPCertificate.getApplyingSubpacket in org.bouncycastle.openpgp.api. An attacker can make a genuine signature from a victim’s signing subkey validate under an...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature through OpenPGPCertificate.getApplyingSubpacket in org.bouncycastle.openpgp.api. An attacker can make a genuine signature from a victim’s signing subkey validate under an...

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accept...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

DEBIAN-CVE-2026-71887

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary Key Binding cross-certification signature, in the case where that binding omits a Key Flags subpacket. RFC 9580 sec...