EUVD-2026-81318

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

CVE-2026-50603 Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

CLEANSTART-2026-KE88989 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Multiple security vulnerabilities affect the restic-fips package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-DG14029 etcd is a distributed key-value store for the data of a distributed system

Multiple security vulnerabilities affect the eks-distro-kube-apiserver package. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

PT-2026-94153

Name of the Vulnerable Software and Affected Versions Acer Agent Service affected versions not specified Description The Acer Agent Service component, included with NitroSense and PredatorSense, uses a hard-coded AES encryption key. This allows a local attacker to potentially access protected...

PT-2026-94233

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An issue exists involving the use of a hard-coded cryptographic key. This allows an unauthenticated attacker with remote access to potentially gain unauthorized access...

Ubuntu 18.04 LTS / 26.04 LTS : python-cryptography vulnerabilities (USN-8776-1)

The remote Ubuntu 18.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8776-1 advisory. It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. Thi...

CVE-2026-50606: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

PT-2026-94925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dell-wmi-base component where the handling of the ultra performance key is incorrect. The dell wmi process key function uses an incorrect index when accessing the...

PT-2026-94956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hardware Elliptic Curve Diffie-Hellman ECDH path within the atmel ecdh compute shared secret function. The function uses a private key stored in the device, but th...

PT-2026-95060

Name of the Vulnerable Software and Affected Versions lxc-ci Arch Linux images published prior to 2026-05-28 Description Images built from images/archlinux.yaml contain a shared pacman local-signing private key located in /etc/pacman.d/gnupg, which is redistributed to all containers or virtual...

CVE-2026-93161: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - clear AES key schedule from stack qatalgxtsreversekey expands the forward XTS AES key on the stack. That schedule contains key material and can remain in the stack frame. Clear the temporary cryptoaesctx with...

CVE-2026-93160: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmelecdhcomputesharedsecret uses the private key stored in the device. However, the public key is cached only after atmelecdhsetsecret...

CVE-2026-28326: Use of Hard-coded Cryptographic Key

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key...

CVE-2026-81478: Use of Hard-coded Cryptographic Key

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-50603: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to...

CVE-2026-52727: Use of Hard-coded Cryptographic Key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-93064: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser iwlmvmfrobtxfkeyiter tracks the last matched byte position in loop variable 'i'. When a full key match is found match == keylen, 'i' points at the last byte of the matched...

Security update for mbedtls-2 (important)

openSUSE security update: security update for mbedtls-2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21864-1 Rating: important References: bsc1245810 bsc1252454 Cross-References: CVE-2025-52496 CVE-2025-59438 CVSS scores: CVE-2025-59438 SUSE : 5....

PT-2026-94163

Name of the Vulnerable Software and Affected Versions Private Feed Key versions prior to 0.2 Description The Private Feed Key WordPress plugin fails to verify that the key used to authenticate a feed request was actually issued by the plugin. Instead, it matches the key against any stored user...