CVE-2026-8881

CVE-2026-8881 affects the Securly Chrome Extension (version 3.0.7). The crypto uses EVP_BytesToKey with MD5 and a single iteration for AES encryption, relying on an MD5 primitive that has been broken since 2004 and provides no key stretching. This weak derivation reduces the security of protected...

CVE-2025-55053

CWE-328: Use of Weak Hash...

CVE-2025-55053

CWE-328: Use of Weak Hash...

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...