CVE-2026-57826

The openHiTLS library (versions 0.2.0 through 0.3.2 ) contains a vulnerability in its X.509 certificate chain verification process. The root cause is that the software only verifies the basic constraints extension and CA flag processing for v3 certificates , while completely ignoring v1 and v2 ce...

PT-2026-77302

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...

EUVD-2026-61278

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...

CVE-2026-57826

An issue was discovered in openHiTLS 0.2.0 through 0.3.2. In the X.509 certificate chain verification, the basic constraints extension and CA flag processing of intermediate CAs are only verified for v3 certificates, and v1/v2 certificates are ignored...

KLA91234 SB vulnerabilities in Apache Tomcat

Security bypass vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass security restrictions. 2. Security vulnerability in...

CVE-2026-8763

A flaw was found in Bouncy Castle for Java, a cryptographic library. An attacker can exploit this vulnerability by manipulating rfc822Name and URI fields within X.509 certificates using a trailing dot. This bypasses Name Constraints, potentially leading to spoofing or unauthorized access. Such an...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

CVE-2026-72673 Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Synthetics private locations can be shared with more than one space, and deleting one removes it from every space it is...

Security update for bouncycastle

This update for bouncycastle fixes the following issues: CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. CVE-2026-12802: CMS AuthEnvelopedData fails to...

SUSE-SU-2026:3559-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. - CVE-2026-12802: CMS AuthEnvelopedData fail...

openjdk: Improve certification checking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...

EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2026-3122)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...

EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2026-3067)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...

droidground v1.0.13

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

SUSE-SU-2026:23127-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...

SUSE-SU-2026:23150-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...

EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2026-2966)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...

tomcat: Apache Tomcat: Misleading security logs due to incorrect control flow

A flaw was found in Apache Tomcat. Due to an always-incorrect control flow implementation, special roles and empty authorization constraints were not accurately included when the effective web.xml configuration was logged. This could lead to a security oversight where administrators might...

tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve

A flaw was found in Apache Tomcat. This vulnerability, located in the rewrite valve, is due to improper handling of URL encoding hex encoding. A remote attacker could exploit this to bypass security constraints in certain configurations, potentially gaining unauthorized access or performing actio...

tomcat: Apache Tomcat: Misleading security logs due to incorrect control flow

A flaw was found in Apache Tomcat. Due to an always-incorrect control flow implementation, special roles and empty authorization constraints were not accurately included when the effective web.xml configuration was logged. This could lead to a security oversight where administrators might...