CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-14916

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

SUSE-SU-2026:23845-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme bsc1276223. - CVE-2026-17084: StringPrep algorithm considered...

CVE-2026-86109

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

EUVD-2026-80093

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

CVE-2026-86109 Security Advisory 0182

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

CVE-2026-86109

Arista VeloCloud Edge (formerly VeloCloud Edge by Broadcom) contains a vulnerability in its software update workflow that may accept update bundles without properly validating their signatures. The root cause is that the workflow does not restrict the digest algorithm used for artifact verificati...

CVE-2026-86109 Security Advisory 0182

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

CVE-2025-36591: Use of a Broken or Risky Cryptographic Algorithm

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

PT-2026-93263

Name of the Vulnerable Software and Affected Versions VeloCloud Edge affected versions not specified Description The software update workflow fails to properly validate signatures of update bundles because it does not restrict the digest algorithm used for artifact verification. A digest algorith...

CVE-2026-82190: Use of Predictable Algorithm in Random Number Generator

Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla secret can compute a valid access token for any order on the site without ever having placed one, gaining guest access to that...

Astra Linux – Vulnerability in OpenSSH

OpenSSH versions prior to 10.3 can use unintended ECDSA algorithms. Any listing of ECDSA algorithms in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted as meaning all ECDSA algorithms...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: null – Use spin locks instead of mutexes. Since the null algorithm may be freed in the softirq context through afalg, using spin locks instead of mutexes is necessary to protect the default null algorithm...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, only the init netns should be allowed to set the default tcpcongestioncontrol to a restricted algorithm. The tcpsetdefaultcongestioncontrol function is netns-safe as it writes to...

Astra Linux – Vulnerability in libssh

A NULL pointer dereference was detected in libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service...

CVE-2026-90779

SIPp through version 3.7.7 is affected by a stack buffer overflow in the createAuthHeader() function. The vulnerability is triggered when processing SIP authentication challenges (HTTP 401 or 407) containing oversized algorithm parameters , allowing a malicious SIP server to corrupt the stack and...

CVE-2026-90779 SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...

PT-2026-90850

Name of the Vulnerable Software and Affected Versions SIPp versions prior to 3.7.8 Description A stack buffer overflow occurs in the createAuthHeader function when processing SIP authentication challenges that contain oversized algorithm parameters. A malicious SIP server can exploit this by...