ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

ephemera

Ephemera : Zero-Trust SSH Certificate Authority Ephemera is a lightweight, self-hosted SSH Certificate Authority designed to enforce Zero-Trust access for infrastructure. It replaces static SSH keys with short-lived certificates, integrates hardware-backed WebAuthn MFA, and maintains...

root-signing

Sigstore root-signing root-signing project maintains the TUF repository used to securely deliver the Sigstore trust root trustedroot.json to Sigstore clients. Documentation signer manual documents the process and requirements from keyholder perspective maintainer manual documents some maintenance...

CVE-2026-115707

Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to privilege escalation via Retrieve Embedded Sensitive Data CAPEC-37. After the ECE certificate rotation procedure runs, data that it retains contains platform...

CVE-2026-115707

Elastic Cloud Enterprise (ECE) is vulnerable to CWE-538 (Insertion of Sensitive Information into Externally-Accessible File or Directory), where retained data from the certificate rotation procedure contains platform credentials and certificate authority private keys . If a lower-privileged compo...

EUVD-2026-112920

Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to privilege escalation via Retrieve Embedded Sensitive Data CAPEC-37. After the ECE certificate rotation procedure runs, data that it retains contains platform...

CVE-2022-2414

CVE-2022-2414 CVE-2022-2414 POC 1. Replace YOURHOST with your target like below url url = "https://example.com/ca/rest/certrequests"...

SUSE SLES16 Security Update : go1.27 (SUSE-SU-2026:24360-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24360-1 advisory. Update to go 1.27.3 bsc1272545: - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority...

CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

EUVD-2026-109836

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

CVE-2026-115693

The hackney_ssl component in benoitc hackney (versions 1.24.0 before 4.9.0 ) contains an Improper Certificate Validation vulnerability. The root cause is that hackney_ssl:merge_ssl_opts/3 retains a default partial_chain callback even when a user provides a custom cacerts or cacertfile to pin a pr...

CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

Microsoft’s response to compromised eMudhra certificate authority keys

Update, October 27, 2026: Microsoft has removed the seven affected certificates from the Microsoft Edge trust list. We've also added more detail on why these keys pose a risk and why organizations should be cautious about restoring trust locally. There's also a link to the Microsoft Trusted Root...

PT-2026-123318

Improper Certificate Validation vulnerability in hackney ssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partial chain, fun hackney ssl:partial chain/1 to...

openSUSE 16 Security Update : go1.27 (openSUSE-SU-2026:22153-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22153-1 advisory. Update to go 1.27.3 bsc1272545: - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority bsc1286317,...

Updated golang package fixes a security vulnerability

crypto/x509: mitigation for security concerns with a specific Certificate Authority. CVE-2026-111943...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:4863-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4863-1 advisory. Update to go 1.27.3 bsc1272545: - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific...

Security update for go1.27 (important)

openSUSE security update: security update for go1.27 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22153-1 Rating: important References: bsc1272545 bsc1286261 bsc1286317 Cross-References: CVE-2026-111943 CVSS scores: CVE-2026-111943 SUSE : 7.4...

CLSA-2026-1792702003 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "Amazon Root CA 1" Certificate "Amazon Root CA 2" Certificate "Amazon Root CA 3" Certificate "Amaz...

CLSA-2026-1792702049 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "OISTE Server Root RSA G1" Certificate "Amazon Root CA 1" Certificate "Amazon Root CA 2" Certifica...