CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

...

openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the "DEFAULT" keyword. A less preferred key exchange may be used...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

Heap-based buffer overflow in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

Description of the security update for Microsoft Exchange Server 2019 CU15: July 14, 2026 (KB5103213)

None None...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: July 14, 2026 (KB5103212)

None None...

Description of the security update for Microsoft Exchange Server 2016 CU23: July 14, 2026 (KB5103215)

None None...

Description of the security update for Microsoft Exchange Server 2019 CU14: July 14, 2026 (KB5103214)

None None...

CVE-2026-10797

creationtimestamp| type| source ---|---|--- 2026-07-14 09:18:49+00:00| seen| https://bsky.app/profile/esetresearch.bsky.social/post/3mqlustra4c24 2026-07-14 09:18:49+00:00| seen| https://bsky.app/profile/esetresearch.bsky.social/post/3mqlusqj43c24 2026-07-14 09:18:50+00:00| seen|...

CVE-2026-50722

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

KLA91150 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Exchange Server...

Security Updates for Microsoft Exchange Server (July 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the July, 2026 security bulletin. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...

CVE-2026-15584

creationtimestamp| type| source ---|---|--- 2026-07-13 13:23:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116912883381040364 2026-07-13 13:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjt5kbc6h25 2026-07-13 16:07:28+00:00| seen|...

CVE-2026-14453

creationtimestamp| type| source ---|---|--- 2026-07-13 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116911848014654725 2026-07-13 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqjddarg6f2f 2026-07-13 09:08:06+00:00| seen|...

CVE-2026-15515

creationtimestamp| type| source ---|---|--- 2026-07-13 01:29:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqik4jlf3e2x 2026-07-13 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116910078363580201 2026-07-13 01:30:27+00:00| seen|...

The vulnerability of the _gnutls_proc_rsa_psk_client_kx() function in the lib/auth/rsa_psk.c file of the GnuTLS cryptographic library allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the gnutlsprocrsapskclientkx function in the lib/auth/rsapsk.c file of the GnuTLS cryptographic library is related to incorrect handling of zero bytes or NULL characters during data exchange. Exploiting this vulnerability could allow an attacker to bypass existing security...

Linux Distros Unpatched Vulnerability : CVE-2026-57221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.decla...