CVE-2026-70454: Improper Certificate Validation

rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...

CVE-2026-52066

TLS certificate notAfter validated against hardcoded 2025-01-01 string...

CVE-2026-52060

TLS certificate notAfter validated against hardcoded 2025-01-01 string...

CVE-2026-52051

mgtlsserverrecvhello sessionidlen OOB read...

CVE-2026-52065

mgtlsclientrecvhello keyshare extension OOB read...

PT-2026-71654

Name of the Vulnerable Software and Affected Versions rsync versions 3.2.0 through 3.2.3 rsync-ssl versions prior to 3.4.5 Description A TLS certificate validation issue allows on-path attackers to intercept encrypted sessions by presenting self-signed or invalid certificates. This occurs because...

CVE-2026-52052

mgtlsparsecertder pubkey BIT STRING length underflow -- OOB read...

CVE-2026-52075

mgrandom rand fallback used for TLS secrets...

CVE-2026-52059

RSA-PSS CertificateVerify checks only 0xbc trailer...

PT-2026-71863

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper bounds checking during TLS session establishment in the Native IBM i JSSE provider allows a local authenticated attacker to generate a stack-based buffer overflow. This occurs when a...

PT-2026-76034

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

CVE-2026-14681: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS connection. Despite a pghba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS...

CVE-2026-18511: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...

CVE-2026-52071

mgtlsverifycertsignature OOB read for short ECDSA integers...

Vulnerability in core server (CVE-2026-14681)

PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS connection. Despite a pghba.conf that appears to require GSSAPI,...

SUSE SLED15: libopenssl-1_1-devel / libopenssl1_1 / libopenssl1_1-32bit / etc (SUSE-SU-2026:3578-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3578-1 advisory. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

Alibaba Cloud Linux 3 : 0250: osbuild-composer (ALINUX3-SA-2026:0250)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0250 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-32280: During chain building, the...

Linux Distros Unpatched Vulnerability : CVE-2026-73500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etc...

Linux Distros Unpatched Vulnerability : CVE-2026-14681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS...

PT-2026-71899

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Handshake messages, such as KeyUpdate, are treated as state-advancing regardless of whether a handshake has been completed. This allows a malicious client to...