CVE-2026-101973

A NULL Pointer Dereference vulnerability exists in the pkid component of Juniper Networks Junos OS . This flaw allows an unauthenticated remote attacker to trigger a denial of service by sending a malformed packet during CMP enrollment or automatic certificate re-enrollment. No specific exploit d...

CVE-2026-53602 nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...