5 matches found
CVE-2026-107692
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
CVE-2026-107692
The War Thunder game client is vulnerable to an account impersonation flaw because it transmits its authentication bearer token (auth_jwt) in the first data packet after the TCP handshake using only LZ4 compression without encryption. A network-positioned attacker can passively intercept and deco...
CVE-2026-107692 War Thunder Account Impersonation
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
EUVD-2026-105305
The War Thunder game client transmits its authentication bearer token authjwt in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this packet to reveal the...
