fulcio

Fulcio コード署名のための無料 CA Fulcio は、OpenID Connect OIDC アイデンティティ（メールアドレスなど）に対してコード署名証明書を発行するための、無料で使用できる認証局です。 Fulcio は、10 分間有効な短期間の証明書のみを発行します。 公開インスタンス Fulcio は一般提供中で、99.5% の可用性 SLO を提供し、API の安定性について semver 規則に従っています。 Fulcio 公開インスタンスの稼働時間データについては、https://status.sigstore.dev を参照してください。 Fulcio...

ephemera

Ephemera : ゼロトラスト SSH 認証局 Ephemera は、インフラストラクチャへのゼロトラストアクセスを強制するために設計された、軽量でセルフホストの SSH 認証局です。静的 SSH キーを短命な証明書に置き換え、ハードウェアバックアップされた WebAuthn MFA を統合し、暗号検証可能な監査証跡を維持します。 !NOTE 正規のソース : Codeberg GitHub ミラー : GitHub 可用性とホスティングのため 高レベルアーキテクチャ root@kitploit: graph LR subgraph Client"User Operator"...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

CVE-2022-2414

CVE-2022-2414 CVE-2022-2414 POC 1. YOURHOST を、下記の url のようにターゲットに置き換えてください url = "https://example.com/ca/rest/certrequests"...

Astra Linux – Vulnerability in OpenSSH

OpenSSH versions prior to 10.3 mishandle the authorizedkeys principals option in unusual scenarios where a principals list is used in conjunction with a Certificate Authority that utilizes comma characters...

CVE-2026-15065

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065

IBM AIX NIM (versions 7.2, 7.3) and PowerVM VIOS 4.1 expose intermediate CA private keys in publicly available update files (CWE-312), allowing unauthenticated remote attackers to bypass security restrictions. IBM has released Service Packs (SP13/SP5/SP3/SP2) and Fix Packs (4.1.2.20/4.1.1.30/4.1....

Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

SummaryRepo under test: https://github.com/Netflix/lemurWhen ADMINONLYAUTHORITYCREATION=False an explicitly supported and documented configuration, POST /api/1/authorities with type=subca never verifies that the caller holds AuthorityPermission on the supplied parent authority. The parent field i...

PT-2026-78428

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Network Installation Management NIM could allow a remote attacker to bypass security restrictions. This issue occurs because intermediate certificate authority private keys...

CVE-2026-71303

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:14+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-v5rc-cpwc-cfpr 2026-08-19 07:31:59+00:00| seen| https://gist.github.com/alon710/048e89a8b6d23388e5627d9e6207e2ad...

CVE-2026-71417

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:05+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-pxmc-2ffp-8j67...

Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

Summary Repo under test: https://github.com/Netflix/lemur When ADMINONLYAUTHORITYCREATION=False an explicitly supported and documented configuration, POST /api/1/authorities with type=subca never verifies that the caller holds AuthorityPermission on the supplied parent authority. The parent field...

CVE-2026-71317 Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/authorities with type=subca did not require AuthorityPermission on the parent authority when ADMINONLYAUTHORITYCREATION was false. AssociatedAuthoritySchema resolved the caller-supplied parent and passed it through authority...

CVE-2026-71317

Netflix Lemur before 1.9.3 allowed any authenticated non-read-only user to create a sub-CA chained to an internal root they lacked permission for, since AuthorityPermission was never checked on the parent authority when ADMIN_ONLY_AUTHORITY_CREATION was false. The resulting intermediate's private...

CVE-2026-48508 Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission

Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flaskprincipal.Permission.init with zero Need objects when ADMINONLYAUTHORITYCREATION and LEMURSTRICTROLEENFORCEMENT are unset because both flags default t...

EUVD-2026-61100

Lemur manages TLS certificate creation. Prior to 1.9.1, StrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flaskprincipal.Permission.init with zero Need objects when ADMINONLYAUTHORITYCREATION and LEMURSTRICTROLEENFORCEMENT are unset because both flags default t...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, caddy, step-fips, step-issuer, step, caddy-fips, step-ca, step-ca-fips...

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-49478

Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind...