CVE-2026-81822

CVE-2026-81822 affects AVEVA Pipeline Integrity Monitor (PIMBoards) due to the use of a broken or risky cryptographic algorithm in its app-native password storage. An attacker with read access to PIMBoards project files can computationally brute-force the weak password hashes to recover user cred...

CVE-2026-69382

CVE-2026-69382 affects Microsoft Exchange Server due to the use of a broken or risky cryptographic algorithm , allowing an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 base score is 5.9 (MEDIUM) , reflecting a network attack vector with high complex...

EUVD-2026-73130

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73176

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-57098

CVE-2026-57098 is an improper verification of cryptographic signature vulnerability in Windows RDP Client (Microsoft Remote Desktop App for Windows). An unauthorized network attacker can disclose information with no user interaction and no prior privileges required. The CVSS 3.1 score is 7.5 (HIG...

Skype for Business Spoofing Vulnerability

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

Microsoft Exchange Server Information Disclosure Vulnerability

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

Copilot Studio Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

Security Bulletin: Due to use bcprov-jdk18on-1.79.jar, IBM webMethods Integration Server is affected by multiple vulnerabilities.

Summary Multiple vulnerabilities were addressed in IBM webMethods Integration Server by upgrading the version of the Bouncy Castle BC-Java bcprov jar to 1.84.0 Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the...

CVE-2026-77105 CommServe Privilege Escalation

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77105 CommServe Privilege Escalation

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

EUVD-2026-72731

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77105

CommServe (Commvault) contains a cryptographic signature verification flaw in its privilege management functionality, enabling privilege escalation. The vulnerability is reachable over the network with low privileges and no user interaction , rated CVSS 4.0 8.7 (HIGH) with high impact on confiden...

CVE-2026-69382: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-86080: Improper Verification of Cryptographic Signature

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...

CVE-2026-57098: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

PT-2026-88289

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

CVE-2026-81821: Use of Hard-coded Cryptographic Key

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...