PT-2026-103524

Name of the Vulnerable Software and Affected Versions OpenBSD versions 7.8 through 7.8 before errata 057 OpenBSD versions 7.9 through 7.9 before errata 021 Description In the ldapd service, delegated BSD authentication results are correlated using only the LDAP child process client file descripto...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords

The question of whether a Frontier AI model could find vulnerabilities that no human researcher had found was settled in April. Claude Mythos Preview identified thousands of previously unknown flaws across every major operating system and browser, including a 27-year-old denial-of-service conditi...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c. The reversed TKIP MIC failure countermeasure window check allows unauthenticated attackers within RF range to send two malformed TKIP frames s...

EUVD-2026-72935

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101: Incorrect Comparison

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2022-50999

creationtimestamp| type| source ---|---|--- 2026-08-25 18:56:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwioadzaj2v 2026-09-02 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujlhzuqxc2l...

PT-2026-81207

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs read directory table function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablks count value that causes heap buffer under-allocation...

PT-2026-81205

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc3 Description An out-of-bounds write occurs in the net defragment function within net/net.c when CONFIG IP DEFRAG is enabled. Remote attackers can trigger this by sending a crafted IP fragment with a non-zero...

PT-2026-81206

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description An out-of-bounds write exists in the RLE8 bitmap decoder within the video subsystem. The video display rle8 bitmap function in drivers/video/video bmp.c decodes run-length encoded streams direct...

PT-2026-81199

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211 michael mic failure function within sys/net80211/ieee80211 crypto tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated b...

PT-2026-81211

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc recv cb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR BUF instead of ERR ABRT, causing the TCP input path to access released memory an...

PT-2026-81214

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6 parse options that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6 ADVERTISE or REPLY packets during netboot to corrupt memory and crash the...

PT-2026-81210

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs readlink reply function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader...

PT-2026-81208

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read slotted partition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

PT-2026-81209

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs read reply function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the...