13929 matches found
CVE-2026-91187
The dashbit nimble_zta library (versions 0.1.2 before 0.1.3 ) contains an improper verification of cryptographic signature vulnerability. Specifically, the verify_token/2 function in lib/nimble_zta/cloudflare.ex calls JOSE.JWT.verify/2 but fails to check the boolean verification result, returning...
CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
EUVD-2026-85871
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
EEF-CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
Summary Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
CVE-2026-91187
Improper Verification of Cryptographic Signature vulnerability in dash...
PT-2026-98275
Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who extracts this cryptographic material...
CVE-2026-91187: Improper Verification of Cryptographic Signature
Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...
UBUNTU-CVE-2026-91187
Improper Verification of Cryptographic Signature vulnerability in dash...
CVE-2026-79762: Use of Hard-coded Cryptographic Key
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...
CVE-2026-75558: Use of Hard-coded Cryptographic Key
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password a...
PT-2026-98277
Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value...
CVE-2026-13505
A flaw was found in Bouncy Castle for Java FIPS BC-FJA. Sensitive cryptographic key material, intended to be securely erased from memory zeroised upon garbage collection, may persist longer than expected. This occurs because the zeroisation process relies on a deprecated Java finalization...
CVE-2026-18181
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...
CVE-2026-18181
The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an authentication bypass. A hard-coded cryptographic key allows a remote attacker to bypass security controls and gain access to sensitive information . No specific exploit details, affected versions, or remediation...
CVE-2026-18181 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...
CVE-2026-18181 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...
EUVD-2026-85349
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...
Improper Verification of Cryptographic Signature
Overview @tauri-apps/plugin-updater is a Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the verifysignature function in updater.rs, which does not validate that the version embedded in the signature's trusted comment matches the version...