Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2026/08/19 2:02 p.m.30 views

CVE-2026-76245 stigmem Federation Peer Token Timestamp Validation Bypass

stigmem pip package stigmem-node version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using...

7.1CVSS0.00183EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/19 2:02 p.m.12 views

CVE-2026-76245 stigmem Federation Peer Token Timestamp Validation Bypass

stigmem pip package stigmem-node version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using...

7.1CVSS5.5AI score
SaveExploits0References4
OSV
OSV
added 2026/08/19 2:02 p.m.18 views

CVE-2026-76242 stigmem Federation Peer Registration Authentication Bypass

stigmem-node 0.9.0a1 accepts federation peer key material during peer registration without a separate administrator out-of-band fingerprint approval step. On nodes that accept federation peer registration over a network where initial registration can be intercepted or misdirected, an attacker can...

9.1CVSS5.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/19 2:02 p.m.31 views

CVE-2026-76242 stigmem Federation Peer Registration Authentication Bypass

stigmem-node 0.9.0a1 accepts federation peer key material during peer registration without a separate administrator out-of-band fingerprint approval step. On nodes that accept federation peer registration over a network where initial registration can be intercepted or misdirected, an attacker can...

9.1CVSS0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder