CVE-2022-1292

CVE-2022-1292 POC Descripción The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

mkchain

mkchain Herramienta de código abierto para ayudarte a construir una cadena de certificados SSL válida. Descripción • Cómo usar • Parámetros • Cómo funciona • Requisitos • Otros • Licencia Descripción Es una herramienta de código abierto para ayudarte a construir una cadena de certificados SSL...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

Rocky Linux 8.6 [CIQ] Security Update: ca-certificates (ciqsa-2026_0015)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260015 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: ca-certificates (crlba-2024_5736)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245736 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

Rocky Linux 9.2 [CIQ] Security Update: ca-certificates (ciqsa-2026_0399)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260399 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

CentOS Linux 7.9 [CIQ] Security Update: ca-certificates (ciqsa-2026_0654)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260654 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: ca-certificates (crlba-2024_5691)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245691 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

Rocky Linux 8.8 [CIQ] Security Update: ca-certificates (ciqsa-2026_0359)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260359 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

UBUNTU-CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

CVE-2026-93302

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCERT and load CA certificates with wolfSSLCTXtrustpeercert or wolfSSLtrustpeercert. The peer must know the certificates being loaded to...

CVE-2026-84716 Automation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnames

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle, the controller signs an X.509 certificate with the receptor mesh certificate authority in which the Common Name, DNS...

CVE-2026-84716 Automation-controller: automation-controller: instance install_bundle issues 10-year, non-revocable receptor mesh-ca certificates for caller-chosen (and case-variant impersonating) hostnames

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle, the controller signs an X.509 certificate with the receptor mesh certificate authority in which the Common Name, DNS...

EulerOS Virtualization 2.10.0 : ca-certificates (EulerOS-SA-2026-3862)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS Virtualization 2.10.1 : ca-certificates (EulerOS-SA-2026-3828)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS Virtualization 2.12.1 : ca-certificates (EulerOS-SA-2026-3578)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS Virtualization 2.11.0 : ca-certificates (EulerOS-SA-2026-3493)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS 2.0 SP10 : ca-certificates (EulerOS-SA-2026-3683)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

EulerOS Virtualization 2.11.1 : ca-certificates (EulerOS-SA-2026-3406)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS 2.0 SP10 : ca-certificates (EulerOS-SA-2026-3731)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...