CVE-2026-14957: Reachable Assertion

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

MongoDB DoS

The vulnerability of the MongoDB database management system is related to the lack of use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-52131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function. CVE-2026-52131 Note that Nessus relies on the presence of the package as...

DEBIAN-CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

UBUNTU-CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF002 and 24.0.1-IF009. These vulnerabilities have been also addressed in 24.0.0-IF008 and 25.0.0-IF006 Vulnerability Details CVEID:CVE-2026-11806 DESCRIPTION: IBM WebSphere Application Server - Liberty...

CVE-2026-80606

A flaw was found in the Linux kernel's drm/xe/userptr component. When a specific test configuration is enabled, the system attempts to perform a write operation while holding a read-only lock. This incorrect lock handling leads to an assertion failure, which can cause system instability or a deni...

CVE-2026-52131: Reachable Assertion

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

CVE-2026-52131

llama.cpp versions b5693 and before are affected by a Reachable Assertion vulnerability located within the gguf_reader::read function. While several Linux distributions have identified this vulnerability, some reports indicate that a vendor-supplied patch may not be available for certain affected...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

PT-2026-84366

Name of the Vulnerable Software and Affected Versions llama.cpp versions prior to b5694 Description A reachable assertion exists within the gguf reader::read function. An assertion is a check used during development to ensure that the program state is correct; a reachable assertion means a specif...

EUVD-2026-69411

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...