9463 matches found
CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
EUVD-2026-69820
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957
CVE-2026-14957 is a denial-of-service vulnerability in Libreswan (an IPsec/IKE implementation for Linux). In FIPS mode , the add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts the result is non-NULL. When public key extraction fails (e.g., RSA exponent set to 0), the assertion ...
Linux Distros Unpatched Vulnerability : CVE-2026-52131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function. CVE-2026-52131 Note that Nessus relies on the presence of the package as...
PT-2026-84641
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
CVE-2026-14957: Reachable Assertion
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
The vulnerability of the MongoDB database management system, related to the lack of use of the assert() function, allows a attacker to trigger a service failure.
The vulnerability of the MongoDB database management system is related to the lack of use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures...
DEBIAN-CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
UBUNTU-CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...
CVE-2026-80606
A flaw was found in the Linux kernel's drm/xe/userptr component. When a specific test configuration is enabled, the system attempts to perform a write operation while holding a read-only lock. This incorrect lock handling leads to an assertion failure, which can cause system instability or a deni...
CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
CVE-2026-52131
llama.cpp versions b5693 and before are affected by a Reachable Assertion vulnerability located within the gguf_reader::read function. While several Linux distributions have identified this vulnerability, some reports indicate that a vendor-supplied patch may not be available for certain affected...
EUVD-2026-69411
llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...
PT-2026-84366
Name of the Vulnerable Software and Affected Versions llama.cpp versions prior to b5694 Description A reachable assertion exists within the gguf reader::read function. An assertion is a check used during development to ensure that the program state is correct; a reachable assertion means a specif...
