CVE-2026-111063

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...

CVE-2026-111063

The AIOHTTP asynchronous HTTP client/server framework for Python and asyncio is vulnerable to a security flaw prior to version 3.14.4 . The Secure attribute for a shared cookie is not enforced, which could allow an attacker to cause a shared cookie marked as Secure to be transmitted over an unenc...

EUVD-2026-104478

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...

CVE-2026-111063 AIOHTTP: Secure attribute not enforced for shared cookie

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...

CVE-2026-16769

CVE-2026-16769 affects the RS9116W/SiWx917 (Silicon Labs), where an unencrypted 'pause encryption request' message can trigger a denial of service . The vulnerability is catalogued as B-E10 in the associated academic paper (arXiv:2409.02905 ). CVSS 4.0 scores it 7.1 (HIGH) with an adjacent-networ...

CVE-2026-65934 BT122 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-65934 BT122 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-33583

Exposure of the QKEY used as input into the ‘OTA-Quantum’ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...