CVE-2026-20069: Inconsistent Interpretation of HTTP Requests

A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This...

CVE-2026-20039: Improper Clearing of Heap Memory Before Release

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due...

CVE-2026-20103: Allocation of Resources Without Limits or Throttling

A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust device memory resulting in a denial of service DoS condition to n...

PT-2026-22981

A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust device memory resulting in a denial of service DoS condition to n...

PT-2026-23027

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software affected versions not specified Description A flaw exists in the VPN web services component that may allow a remote attacker t...

CVE-2026-20105: Missing Release of Memory after Effective Lifetime

A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to exhaust device memory resulting in a denial of...

PT-2026-22975

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software affected versions not specified Description A flaw exists in the VPN web server that could allow a remote, unauthenticated...

PT-2026-23011

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA Software affected versions not specified Description A flaw exists in how the software manages initial TCP connections under a TCP SYN flood attack. This could allow a remote, unauthenticat...

CVE-2026-20106: Missing Release of Memory after Effective Lifetime

A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust device memory resulting in a denial of...

Malicious code in ctf-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e47981485066b674150cc4d9d3709e41707e69111f188e54e772becc7349ab89 The package states to contain a modified curl library to allow low-level request modifications. However, there is also undisclosed malicious behavior: 1. The...

MAL-2026-1085 Malicious code in ctf-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e47981485066b674150cc4d9d3709e41707e69111f188e54e772becc7349ab89 The package states to contain a modified curl library to allow low-level request modifications. However, there is also undisclosed malicious behavior: 1. The...

CVE-2026-20051

A vulnerability with the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vulnerability is due to a logic error when...

PT-2026-22116

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.80.1 Description Fleet’s certificate template deletion API had a broken authorization check. This allowed a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. T...

Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability

A vulnerability with the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vulnerability is due to a logic error when...

Implementation and Transition to Post-Quantum Cryptography of the Minimal IKE Protocol

This paper concerns the Minimal Internet Key Exchange IKE protocol, which has received little attention to date, despite its potential to make the best-known IKE protocol sufficiently lightweight to be also applied in contexts where it is currently prohibitive, due to its large footprint. First, ...

PT-2026-21939

Name of the Vulnerable Software and Affected Versions Cisco Nexus 3600 Platform Switches affected versions not specified Cisco Nexus 9500-R Series Switching Platforms affected versions not specified Description A flaw exists in the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexu...

CVE-2026-2961

A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried...

The vulnerability in the implementation of the L2TP/IPSec VPN server software for Wi-Fi routers from TP-Link, the Archer AXE75, allows a perpetrator to disclose confidential information.

The vulnerability of the L2TP/IPSec VPN server implementation in the Wi-Fi router software from TP-Link Archer AXE75 relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to disclose protected information remotely...

The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to bypass security restrictions and gain full control over the device.

The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers lies in the lack of measures to neutralize specific components. Exploiting this vulnerability allows a hacker to bypass security restrictions and gain full control over the device...

The vulnerability of the VPN module in TP-Link Archer BE230 wireless routers allows a hacker to execute arbitrary code, increase their privileges, modify data, and trigger a service failure.

The vulnerability of the VPN module in TP-Link Archer BE230 Wi-Fi routers relates to the lack of measures taken to neutralize specific components. Exploiting this vulnerability allows a malicious individual to execute arbitrary code, increase their privileges, modify data, and cause service...