CVE-2026-8881

Version 3.0.7 of the Securly Chrome Extension , a web filtering tool for K–12 schools, contains a cryptographic weakness. The extension utilizes EVP_BytesToKey for AES key derivation using MD5 with only a single iteration . Because MD5 is deprecated and single iterations provide no key stretching...

CVE-2025-55053

CWE-328: Use of Weak Hash...

CVE-2025-55053

CWE-328: Use of Weak Hash...

The vulnerability in the software installation tool of Acronis Cyber Protect 16 allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the Acronis Cyber Protect 16 software installation tool is related to the use of an algorithm whose security requirements are not met for the hash function. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...