Lucene search
+L

1024 matches found

osv_azl
osv_azl
•added 2026/10/07 5:17 p.m.•23 views

AZL-107739 CVE-2026-92542 affecting package moby-engine 25.0.3-20

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/07 5:17 p.m.•43 views

DEBIAN-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/07 5:17 p.m.•11 views

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/10/07 5:17 p.m.•17 views

UBUNTU-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/07 4:42 p.m.•14 views

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 4:42 p.m.•12 views

EUVD-2026-94483

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/07 4:42 p.m.•16 views

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0
Mend
Mend
•added 2026/10/07 4:42 p.m.•12 views

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

7.1CVSS5.9AI score0.00066EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 4:42 p.m.•28 views

CVE-2026-92542

A vulnerability in Linux Swarm allows for blind VXLAN injection into encrypted overlay networks. The root cause is that firewall rules marking VXLAN datagrams for encryption indiscriminately match both authentic kernel-sent datagrams and forged datagrams from user processes. Specifically, any UDP...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 4:42 p.m.•48 views

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS0.00066EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/07 4:42 p.m.•11 views

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2026/10/07 4:42 p.m.•13 views

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/10/07 4:17 p.m.•50 views

CVE-2026-76485 Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

A vulnerability in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service DoS on an affected device. This vulnerability is...

9.8CVSS0.00509EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•11 views

CVE-2026-92542: Authentication Bypass by Spoofing

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

6.9CVSS5.9AI score0.00066EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•10 views

PT-2026-107622

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description Firewall rules designed to mark VXLAN datagrams for encryption fail to distinguish between authentic datagrams sent from the kernel and forged datagrams sent by user processes. This allows any...

6.9CVSS5.7AI score0.00066EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-92542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sen...

6.9CVSS5.8AI score0.00066EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/06 8:17 p.m.•10 views

CVE-2026-102164

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

3.1CVSS0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:40 p.m.•20 views

CVE-2026-102164

Affected Arista access points are vulnerable when configured with VXLAN tunnelling and L2-proxy (specifically for the VESPA use-case ). A wireless client associated with the tunnelled SSID can send a crafted packet, triggering an out-of-bounds read (CWE-125) that causes the access point to reveal...

3.1CVSS6.3AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:40 p.m.•48 views

CVE-2026-102164 Security Advisory 0196

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

3.1CVSS0.00191EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:40 p.m.•12 views

EUVD-2026-93966

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

3.1CVSS6.3AI score0.00191EPSS
SaveExploits0References1
Rows per page
Query Builder