CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write

CVE-2025-5688 – FreeRTOS-Plus-TCP の Out-of-Bounds Write エクスプロイト リモートメモリ破損 / DoS / 潜在的なRCEトリガー 。FreeRTOS-Plus-TCPにおける、LLMNRまたはmDNSクエリ内の過度に長いDNS名を処理する際の脆弱性（バッファ割り当て方式1）。 エクスプロイト作成者: Mohammed Idrees Banyamer 国: ヨルダン Instagram: @banyamersecurity 日付: 2025年12月26日 概要 このPoCは、脆弱なバージョンの FreeRTOS-Plus-TCP...

Security Bulletin: Storage Virtualize Ansible Collection is VEX affected by a vulnerability in the crypography package

Summary Storage Virtualize Ansible Collection uses the cryptography package to establish secure communications with managed systems. Due to CVE-2026-34073, certificate validation performed by the cryptography package may incorrectly trust certificates in certain DNS name constraint scenarios...

CVE-2022-26923

CVE-2022-26923 Tenable によって説明されている通り: Active Directory ドメインサービスの特権昇格の脆弱性 CVSS v3 基本スコア: 8.8 ベクター: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 深刻度: 高 概要: CVE-2022-26923 は、Microsoft Active Directory 証明書サービス AD CS の脆弱性を悪用して権限を昇格させます。 証明書テンプレート: AD CS は、証明書要求用に User と Machine の2つのデフォルトテンプレートを提供します。...

CVE-2026-93601

A flaw was found in rustls-webpki. This component incorrectly processes DNS Domain Name System name constraints for certificates asserting a wildcard name. This could allow a misissued wildcard certificate to be accepted for a domain that should be outside its permitted scope. Consequently, this...

SUSE CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-61612 @aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard validateServerUrl added for CVE-2026-33060, extended for CVE-2026-53509 validates only the hostname string and never resolves DNS. Any caller-supplied serverurl whose hostname resolves to an...

Linux Distros Unpatched Vulnerability : CVE-2026-93601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name...

AZL-103460 CVE-2026-93601 affecting package kata-containers-cc 3.15.0.aks0-21

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

AZL-103521 CVE-2026-93601 affecting package rust-afterburn 5.8.2-2

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

AZL-103500 CVE-2026-93601 affecting package rust 1.75.0-31

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

AZL-103509 CVE-2026-93601 affecting package rust 1.96.1-2

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

DEBIAN-CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

UBUNTU-CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

PT-2026-99974

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

PT-2026-99977

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

PT-2026-99981

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93601: Improper Certificate Validation

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CoreDNS: Unauthenticated memory exhaustion in custom transports

Summary CoreDNS parses attacker-controlled DNS section counts before validating them on DNS-over-HTTPS DoH and DoH3, DNS-over-QUIC DoQ, and DNS-over-gRPC listeners. An unauthenticated client can use DNS name compression to make one 65,533-byte request allocate more than 10 MiB while it is unpacke...

CVE-2026-82399 CoreDNS: Unauthenticated memory exhaustion in custom transports

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go call dns.Msg.Unpack on attacker-controlled DNS section counts before...