56702 matches found
CVE-2026-77703 SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine
Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...
CVE-2026-77703
The HAVELSAN Inc. Liman Render Engine (versions 1.0 before 1.2-75 ) is vulnerable to an SSH Host Key Verification Bypass due to a key exchange without entity authentication. This flaw enables an Adversary in the Middle (AiTM) attack. The vulnerability has a CVSS 3.1 base score of 5.9 (Medium) , i...
CVE-2026-77703 SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine
Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...
CVE-2026-91187
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187
The dashbit nimble_zta library (versions 0.1.2 before 0.1.3 ) contains an improper verification of cryptographic signature vulnerability. Specifically, the verify_token/2 function in lib/nimble_zta/cloudflare.ex calls JOSE.JWT.verify/2 but fails to check the boolean verification result, returning...
EUVD-2026-85871
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
EEF-CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Summary Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a signature verification bypass vulnerability in joserfc (CVE-2026-49852)
Summary An authentication and signature verification bypass vulnerability in the joserfc JSON Object Signing and Encryption JOSE library CVE-2026-49852 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 1.6.8. Vulnerability Details...
WordPress Premium Packages plugin 7.0.0-7.2.0 - Unauthenticated PayPal Webhook Signature Verification Bypass vulnerability
Unauthenticated PayPal Webhook Signature Verification Bypass vulnerability discovered by Farid Narimanov in WordPress Plugin WPDM – Premium Packages versions 7.0.0-7.2.0...
CVE-2026-61604: Improper Authorization
The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that was resolved from a DID verification method, without verifying that the resolved address belonged to the transaction signer. Affected...
CVE-2026-91187: Improper Verification of Cryptographic Signature
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models
Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...
CVE-2026-81630: Insufficient Verification of Data Authenticity
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...
Linux Distros Unpatched Vulnerability : CVE-2026-86247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some...
PT-2026-98192
Name of the Vulnerable Software and Affected Versions ixo Blockchain versions prior to 8.0.0 Description Improper authorization in the x/bonds module allows the movement of funds from an address resolved from a DID verification method without verifying if the address belongs to the transaction...
