SUSE-SU-2026:23538-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

SUSE-SU-2026:23512-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVPCipher bsc1275837. - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overfl...

openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX X9.42 peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This...

openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

A flaw was found in OpenSSL's CMSdecrypt and PKCS7decrypt functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME...

openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX X9.42 peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This...

OpenSSL pinning bypass

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw

A flaw was found in Node.js. The HTTPS Agent, responsible for managing secure connections, can incorrectly reuse client identities across different requests. This occurs due to a technical issue with PFX object-array key collisions during connection reuse. As a result, a client's identity,...

curl: CVE-2026-87866: wolfSSL public-key pinning bypass

Summary curl 8.22.0 built with wolfSSL can accept a CURLOPTPINNEDPUBLICKEY hash for a key the TLS peer does not possess. wolfSSL completes the TLS handshake using public key A from a malformed certificate. curl then reparses the same DER using CurlparseX509 and, because of a manipulated validity...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool

Summary Potential vulnerability in AngularJS has been identified that affects IBM License Key Server Administration and Reporting Tool. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization ...

CVE-2025-59528

CVE-2025-59528 Proof of Concept English version PoC minimaliste et orienté validation technique de la vulnérabilité sur un environnement autorisé. Prerequis Avoir un compte utilisateur sur le dashboard Flowise cible. Disposer d'une clef API valide associee a ce compte. Demarrer un listener sur ta...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:js-yaml is a human-friendly data serialization language. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the merge key handling of the loader, where the maxTotalMergeKeys budget does not count empty mappings...

Allocation of Resources Without Limits or Throttling

Overview js-yaml is a human-friendly data serialization language. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the merge key handling of the loader, where the maxTotalMergeKeys budget does not count empty mappings against its limit. A...

EUVD-2026-69723

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.ph...

PT-2026-84655

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An issue exists where libcurl fails to enforce public key pinning when CURLOPT PINNEDPUBLICKEY is used in conjunction with options that disable standard peer verification, specifically CURLOPT S...

PT-2026-84662

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

PT-2026-84746

The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page, allowing attackers to trick a logged-in administrator into changing the configured third-party API key. Once replaced, all subsequent member registration data name, email,...

SecDT: A Profile-Based Security Layer for TRDP Communications

The Train Real-time Data Protocol TRDP is widely used on rolling stock but it provides limited native support for cryptographic protection. Furthermore, the multicast traffic profile used in TRDP Process Data to exchange critical information between onboard subsystems makes the introduction of...

Variational Probabilistic Quantization for Secret Key Generation

Secret key generation from correlated observations at Alice and Bob, in the presence of an eavesdropper Eve, underpins physical-layer security. Classical pipelines quantize by hand, amplify privacy afterwards, and optimize no objective tied to a key rate. We propose Variational Probabilistic...