CVE-2026-54887 DTLS server cookie bypass during startup window due to empty initial cookie secret

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...

CVE-2026-54887

CVE-2026-54887 concerns Erlang/OTP's DTLS server in ssl, where during startup the cookie secret is initialized to an empty binary instead of a random value. This makes DTLS cookie computation deterministic for the first 0–15 seconds, allowing an observer of plaintext ClientHello to forge a valid ...

CVE-2026-57760

creationtimestamp| type| source ---|---|--- 2026-07-02 16:04:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpofuyuxxe24 2026-07-03 00:46:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppd2oktjy2i 2026-07-03 03:53:14+00:00| seen|...

CVE-2026-4767

creationtimestamp| type| source ---|---|--- 2026-07-02 15:31:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoe2bhq6y2a 2026-07-02 15:59:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpofn66j252j 2026-07-03 04:01:39+00:00| seen|...

CVE-2026-8079

creationtimestamp| type| source ---|---|--- 2026-07-02 15:21:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpodiemxpv26 2026-07-03 07:25:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzdjgcdz26 2026-07-03 09:37:20+00:00| seen|...

CVE-2026-56004

A shellcode injection in the mercurial handler of the obs tarscm source service before version 0.12.4 could be used by attackers able to provide a service file to execute code as the source service or the local user checking out the malicious services...

CVE-2026-6902

creationtimestamp| type| source ---|---|--- 2026-07-02 15:13:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpod2scxtv72...

EUVD-2026-41404

A shellcode injection in the mercurial handler of the obs tarscm source service before version 0.12.4 could be used by attackers able to provide a service file to execute code as the source service or the local user checking out the malicious services...

CVE-2026-56004

A shellcode injection in the mercurial handler of the obs tarscm source service before version 0.12.4 could be used by attackers able to provide a service file to execute code as the source service or the local user checking out the malicious services...

CVE-2026-54259

creationtimestamp| type| source ---|---|--- 2026-07-02 14:35:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaw3jyg32y 2026-07-03 13:22:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqndfs6nq2f...

CVE-2026-36909

creationtimestamp| type| source ---|---|--- 2026-07-02 14:30:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoanicpv22q 2026-07-03 09:21:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7tp5mhs2y...

CVE-2026-36912

creationtimestamp| type| source ---|---|--- 2026-07-02 14:29:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoalymrak2o 2026-07-03 09:00:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq6nlubk22m...

CVE-2026-54263

creationtimestamp| type| source ---|---|--- 2026-07-02 14:28:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoajono6c2o 2026-07-03 13:21:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnasm4g32y...

CVE-2026-54262

creationtimestamp| type| source ---|---|--- 2026-07-02 14:28:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaj35qfl27 2026-07-03 13:26:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnk6jp5n2c...

CVE-2026-54712

creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w 2026-07-03 09:15:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y 2026-07-29 20:31:26+00:00| seen|...

CVE-2026-54260

creationtimestamp| type| source ---|---|--- 2026-07-02 14:26:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoafqta2k2q 2026-07-03 13:26:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnj7hxnt2y...

CVE-2026-52186

creationtimestamp| type| source ---|---|--- 2026-07-02 14:25:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaez6hty2i 2026-07-02 21:19:59+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoxjh46wi2i 2026-07-03 09:09:41+00:00| seen|...

CVE-2026-36911

creationtimestamp| type| source ---|---|--- 2026-07-02 14:23:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaauvk6h2r 2026-07-03 09:22:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7vrw7en2m...

CVE-2026-36910

creationtimestamp| type| source ---|---|--- 2026-07-02 14:20:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoa425kkt2d 2026-07-03 09:22:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7v6adfc2j...

CVE-2026-13251

creationtimestamp| type| source ---|---|--- 2026-07-02 14:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpo7rpkclv27 2026-07-02 22:22:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2yymfoc2o 2026-07-02 22:22:22+00:00| seen|...