cve-2026-45185-detection-script

CVE-2026-45185 検出スクリプト c SECPlayground Platform —https://www.secplayground.com これらの検出スクリプトは SECPlayground Platform の所有物です。 2 つの安全な検出スクリプトです。どちらも closenotify-mid-BDAT トリガーを起動しないため、デーモンをクラッシュさせたり、パニックログのエントリを残したりすることはありません。 両方の判定結果は「脆弱性の可能性が高い」です — GnuTLS と OpenSSL ビルドをリモートで区別することは、実際に悪用しない限り信頼できませ...

CVE-2026-25075-check

CVE-2026-25075 脆弱性評価ツール strongSwan VPN サーバーが CVE-2026-25075 に対して脆弱かどうかを、サービスを停止させることなく安全に検出します。詳細は Bishop Fox ブログ の完全な解説記事をご覧ください。 概要 CVE-2026-25075 は、strongSwan の EAP-TTLS プラグインにおける整数アンダーフロー脆弱性であり、リモートの認証されていない攻撃者が特別に細工した EAP-TTLS メッセージを送信することで IKE デーモンをクラッシュさせることができます。この脆弱性は strongSwan バージョン...

CentOS Linux 8.5 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / libkadm5 (CENTOS8.5:CLSA-2025:1742662173)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1742662173 advisory. - In MIT Kerberos 5 aka krb5 before 1.22 with incremental propagation, there is an integer overflow for a large update size to resize in...

AlmaLinux 9.2 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1756110212)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756110212 advisory. - In MIT Kerberos 5 aka krb5 before 1.22 with incremental propagation, there is an integer overflow for a large update size to resiz...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt 脆弱性再現環境 このリポジトリは、CVE-2021-3975 （libvirt qemuProcessHandleMonitorEOF use-after-free、CWE-416）の 再現可能な脆弱性環境スナップショットであり、対応するコンテナイメージ yan5ui/cve-2021-3975:tier1（ubuntu:20.04 ベース）からエクスポートしたものです。 この環境では、脆弱性バージョンのソースコード に対して再現可能なビルドを完了し、ビルド成果物、ビルドスクリプト、完全なビルドログを保持しています。 脆弱性の再現と...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-090144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090144 advisory. In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon crash. Tenable has extract...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libreswan (UTSA-2023-001671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001671 advisory. pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The earliest...

Fortinet FortiProxy 7.2.x / 7.4.x / 7.6.x < 7.6.7 NULL Pointer Dereference in httpsd (FG-IR-26-173)

The version of FortiProxy installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-173 advisory. - A NULL Pointer Dereference vulnerability CWE-476 in Fortinet FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions,...

EulerOS Virtualization 2.11.0 : net-snmp (EulerOS-SA-2026-3530)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an...

Fortinet Fortigate Null Pointer Dereference in Log Report (FG-IR-26-173)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-173 advisory. - A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all...

EulerOS Virtualization 2.11.1 : net-snmp (EulerOS-SA-2026-3443)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an...

Astra Linux – Vulnerability in avahi

A vulnerability was discovered in the avahi library. This flaw allows a non-privileged user to make a dbus call, causing the avahi daemon to crash...

Astra Linux – Vulnerability in libvirt

A NULL pointer dereference flaw was discovered in the udevConnectListAllInterfaces function within libvirt. This issue can occur when detaching a host interface while simultaneously collecting the list of interfaces using the virConnectListAllInterfaces API. This flaw could be exploited to carry...

Astra Linux – Vulnerability in libvirt

A use-after-free flaw was discovered in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting...

EUVD-2026-72930

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...

EUVD-2026-70818

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2026-18167

A stack-based buffer overflow in the EasyMesh module of the TP-Link Archer AX55 v4 allows a LAN attacker, when Mesh mode is enabled, to submit crafted input that crashes the easymesh daemon and may potentially achieve remote code execution . The vulnerability requires no prior authentication but ...

CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...

SUSE CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...