4 matches found
UBUNTU-CVE-2026-86219
Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...
9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References3
PT-2026-34190
Name of the Vulnerable Software and Affected Versions Oxia versions prior to 0.16.2 Description The OIDC authentication provider unconditionally sets SkipClientIDCheck: true in the go-oidc verifier configuration. This disables the standard audience aud claim validation at the library level,...
9.3CVSS5.2AI score0.00408EPSS
SaveExploits0
20