CVE-2020-36730

CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - 对 AJAX 调用的不当访问控制（Subscriber+） 描述： 该插件中的部分 AJAX 调用未正确检查权限和 CSRF 令牌，从而导致任意文章读取、订阅者列表导出以及插件停用等问题。 root@kitploit: reference: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f1ef067b-e4b4-4174-b6ff-ec94a7afd55d?source=api-prod...

CVE-2025-32118

🚀 CVE-2025-32118 - WordPress CMP 插件 RCE 利用工具 🔍 标题： WordPress CMP – Coming Soon & Maintenance 插件 = 4.1.13 - 远程代码执行 RCE 🗓️ 发布时间： 2025-04-04 🔐 CWE： CWE-434 - 危险类型文件的无限制上传 📊 CVSS： 9.1 严重 — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 📜 描述 WordPress 的 CMP – Coming Soon & Maintenance 插件（=...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. CVE-2026-63074: CMP indefinite cache growth of ExtraCerts...

OESA-2026-3625 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never...

OESA-2026-3624 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never...

Updated openssl packages fix security vulnerabilities

Unbounded Memory Growth in QUIC Server Incoming Channel Queue. CVE-2026-14456 QUIC Server May Trigger Double Free When Processing INITIAL Packet. CVE-2026-18798 Heap Buffer Overflow in CMS Key Unwrapping. CVE-2026-63072 Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...

MGASA-2026-0353 Updated openssl packages fix security vulnerabilities

Unbounded Memory Growth in QUIC Server Incoming Channel Queue. CVE-2026-14456 QUIC Server May Trigger Double Free When Processing INITIAL Packet. CVE-2026-18798 Heap Buffer Overflow in CMS Key Unwrapping. CVE-2026-63072 Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping bsc1274788. CVE-2026-63074: CMP Indefinite Cache Growth of ExtraCerts bsc1274797...

SUSE-SU-2026:3866-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release . - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: unbounded growth of extraCerts...

SUSE CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

SUSE CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

SUSE CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

Untrusted Sender DN Used as Format String in CMP Response Validation

...

CMP Indefinite Cache Growth of ExtraCerts

...

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

...

CVE-2026-13414

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

CVE-2026-13415

The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls to...

CVE-2026-13416

The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page, allowing users with the Editor role when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls to inject...

EUVD-2026-66868

The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor role when the administrator has granted the Editor role access to the CMP WordPress plugin before 4.1.18's admin-bar controls to...