9723 matches found
CVE-2026-75034 Rancher: SAML Assertion Replay
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...
AZL-99036 CVE-2026-80742 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: afpacket: Don't send zero-byte data in tpacketsnd. syzbot reported a WARNING in devqueuexmit triggered via tpacketsnd: skbassertlen WARNING: at include/linux/skbuff.h:2753 skbassertlen WARNING: at devqueuexmit+0x21bc/0x4970...
UBUNTU-CVE-2026-80734
In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...
miniOrange SAML SSO Auth Bypass RCE (CVE-2026-15013)
Exploits CVE-2026-15013 in miniOrange SAML SSO = 5.4.3: HMAC signature algorithm confusion in SAML assertion validation lets an unauthenticated attacker forge a signed assertion using the IdP X509 public key as the HMAC secret. Enumerates WordPress users, obtains admin via forged SAMLResponse,...
FIPS mode assertion failure via malicious CERT payload
...
CVE-2026-80734: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...
PT-2026-84932
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs file system where cached inodes may not have their mapping flags and minimal folio order properly initialized. This occurs when an inode is evicted due to...
CVE-2026-75034: Authentication Bypass by Capture-replay
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...
PT-2026-84940
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where sending zero-byte packets via the TPACKET ring buffer on devices without a hard header where dev-hard header len is 0 can trigger a warning in t...
PT-2026-84925
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc5 Description An issue exists in the x86 Machine Check Exception MCE implementation where the CMCI storm detection attempts to modify a polling timer before it has been properly initialized. This sequence...
CVE-2026-82183
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
EUVD-2026-69861
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
CVE-2026-82183 OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
CVE-2026-82183
The OAuth Single Sign On WordPress plugin, in versions 6.25.0 through 7.0.0 , contains an improper authentication vulnerability. The plugin fails to verify the identity assertion returned during its Steam single sign-on flow . This flaw allows unauthenticated attackers to perform an unauthenticat...
AZL-98441 CVE-2026-14957 affecting package libreswan for versions less than 4.15-3
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
EUVD-2026-69820
In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...
CVE-2026-14957
CVE-2026-14957 is a denial-of-service vulnerability in Libreswan (an IPsec/IKE implementation for Linux). In FIPS mode , the add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts the result is non-NULL. When public key extraction fails (e.g., RSA exponent set to 0), the assertion ...
PT-2026-84641
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...